manage-events-with-the-cli

Pass

Audited by Gen Agent Trust Hub on Oct 23, 2026

Risk Level: SAFEINDIRECT_PROMPT_INJECTIONEXTERNAL_DOWNLOADSCOMMAND_EXECUTION
Full Analysis
  • [INDIRECT_PROMPT_INJECTION]: The skill is designed to ingest and process data from external local files, creating a potential surface for indirect instructions to influence agent behavior.
  • Ingestion points: SKILL.md identifies event.json and guests.csv as sources of data for event creation and invitation sending.
  • Boundary markers: There are no specific delimiters or instructions to ignore potential commands within these data files.
  • Capability inventory: The skill executes the ticketfairy CLI, which has the capability to perform network requests (API interaction), file system writes (CSV export), and modify event configurations.
  • Sanitization: No explicit validation or sanitization of the input files is prescribed in the instructions.
  • [EXTERNAL_DOWNLOADS]: The skill requires the installation of an external software package.
  • Evidence: The skill instructs the user to run npm install -g ticketfairy to obtain the necessary tool. This package corresponds to the official CLI of the vendor, 'theticketfairy'.
  • [COMMAND_EXECUTION]: The skill's primary functionality is delivered through the execution of the ticketfairy CLI tool to manage account and event data.
Audit Metadata
Risk Level
SAFE
Analyzed
Oct 23, 2026, 10:46 PM