manage-events-with-the-cli
Pass
Audited by Gen Agent Trust Hub on Oct 23, 2026
Risk Level: SAFEINDIRECT_PROMPT_INJECTIONEXTERNAL_DOWNLOADSCOMMAND_EXECUTION
Full Analysis
- [INDIRECT_PROMPT_INJECTION]: The skill is designed to ingest and process data from external local files, creating a potential surface for indirect instructions to influence agent behavior.
- Ingestion points:
SKILL.mdidentifiesevent.jsonandguests.csvas sources of data for event creation and invitation sending. - Boundary markers: There are no specific delimiters or instructions to ignore potential commands within these data files.
- Capability inventory: The skill executes the
ticketfairyCLI, which has the capability to perform network requests (API interaction), file system writes (CSV export), and modify event configurations. - Sanitization: No explicit validation or sanitization of the input files is prescribed in the instructions.
- [EXTERNAL_DOWNLOADS]: The skill requires the installation of an external software package.
- Evidence: The skill instructs the user to run
npm install -g ticketfairyto obtain the necessary tool. This package corresponds to the official CLI of the vendor, 'theticketfairy'. - [COMMAND_EXECUTION]: The skill's primary functionality is delivered through the execution of the
ticketfairyCLI tool to manage account and event data.
Audit Metadata