email-and-market-to-buyers
Pass
Audited by Gen Agent Trust Hub on Oct 23, 2026
Risk Level: SAFEEXTERNAL_DOWNLOADSCOMMAND_EXECUTION
Full Analysis
- [EXTERNAL_DOWNLOADS]: The skill instructs the installation of the official Ticket Fairy CLI tool via NPM using
npm install -g ticketfairy. These resources belong to the skill vendor and are used as intended for the primary skill purpose. - [COMMAND_EXECUTION]: Provides detailed command-line instructions for managing events and messaging using the official CLI, such as
ticketfairy event get,ticketfairy brand list, andticketfairy messaging send. It correctly advises the use of--non-interactiveand JSON output for automated agent interactions. - [DATA_EXPOSURE]: The skill implements strong security guidance by instructing users to store API keys in an environment variable (
TICKET_FAIRY_API_KEY) and explicitly warning the agent to keep passwords and tokens out of the chat log. It also directs that sensitive details like bank or tax information remain strictly within the user's browser environment.
Audit Metadata