manage-traders-and-exhibitors
Pass
Audited by Gen Agent Trust Hub on Oct 23, 2026
Risk Level: SAFECOMMAND_EXECUTIONEXTERNAL_DOWNLOADSINDIRECT_PROMPT_INJECTION
Full Analysis
- [COMMAND_EXECUTION]: The skill provides instructions for the agent to use the
ticketfairycommand-line interface to manage event organizers, brands, and trader data. - [EXTERNAL_DOWNLOADS]: Instructions include installing the
ticketfairypackage from the official npm registry (npm install -g ticketfairy), which is a legitimate vendor tool. - [INDIRECT_PROMPT_INJECTION]: The skill identifies an attack surface by processing data from external sources.
- Ingestion points: Reads trader applications, certificate uploads, and financial reports from external entities (SKILL.md).
- Boundary markers: The instructions do not define specific delimiters for external data.
- Capability inventory: The skill has the capability to modify trader statuses and generate invoices via CLI and MCP tools (
decide_trader_application,raise-invoice). - Sanitization: No explicit sanitization or input validation steps are provided for the ingested data.
- Mitigation: The skill explicitly mandates human oversight, instructing the agent to wait for the organizer's approval before performing any changes or sending communications.
Audit Metadata