start-organising-events
Pass
Audited by Gen Agent Trust Hub on Oct 12, 2026
Risk Level: SAFEINDIRECT_PROMPT_INJECTIONEXTERNAL_DOWNLOADS
Full Analysis
- [SAFE]: The skill is configured to interact only with the vendor's verified domains (
ticketfairy.comandtheticketfairy.com), ensuring all data exchange happens within a trusted environment. - [SAFE]: Explicit security constraints are provided to ensure the agent does not attempt to collect sensitive authentication data, such as passwords, email verification codes, or two-factor authentication tokens from the user.
- [EXTERNAL_DOWNLOADS]: The skill fetches structured product and plan information from the Ticket Fairy API to facilitate plan comparisons and event setup.
- [INDIRECT_PROMPT_INJECTION]: The skill handles untrusted user input by incorporating event details into API requests for draft creation.
- Ingestion points: User-provided event metadata is ingested in
SKILL.mdto populate JSON payloads. - Boundary markers: The instructions command the agent to stick strictly to the user's provided information and avoid making assumptions or inventing data.
- Capability inventory: The skill possesses the capability to perform authenticated
POSTandPATCHrequests to create and modify event drafts on the vendor's platform. - Sanitization: Input is handled as plain text mapped to specific attributes, with instructions to ignore any fields not explicitly provided by the user.
Audit Metadata