track-advertising-campaigns
Pass
Audited by Gen Agent Trust Hub on Oct 23, 2026
Risk Level: SAFEEXTERNAL_DOWNLOADSCOMMAND_EXECUTIONINDIRECT_PROMPT_INJECTION
Full Analysis
- [EXTERNAL_DOWNLOADS]: The skill recommends installing the official
ticketfairyCLI package from the NPM registry to manage advertising pixels and conversion tracking. - [COMMAND_EXECUTION]: The skill utilizes several CLI commands (
ticketfairy login,brand list,event stats, etc.) to interact with the platform and perform statistics retrieval or configuration. - [INDIRECT_PROMPT_INJECTION]: (1) Ingestion points: Task-specific instructions are dynamically fetched from the vendor's MCP server at
https://www.ticketfairy.com/docs/mcpusing theget_guidetool. (2) Boundary markers: The skill instructs the agent to follow the guide's steps strictly to avoid errors, although it lacks explicit delimiters for the fetched data. (3) Capability inventory: The agent has access to shell command execution via theticketfairyCLI and interaction with the dashboard assistant 'Fai'. (4) Sanitization: No explicit sanitization of the remote guide content is performed before processing.
Audit Metadata