run-crew-and-volunteers

Pass

Audited by Gen Agent Trust Hub on Oct 23, 2026

Risk Level: SAFE
Full Analysis
  • [SAFE]: The skill utilizes official vendor resources, including the ticketfairy CLI (available via NPM) and the Ticket Fairy MCP server at ticketfairy.com. These tools are intended for use by event organizers and are consistent with the skill's stated purpose.- [INDIRECT_PROMPT_INJECTION]: The skill handles potentially untrusted data from volunteer application forms and rota spreadsheets. This risk is mitigated through explicit instructions requiring the agent to obtain human approval before performing any write operations or sending communications.- [DATA_EXFILTRATION]: The skill provides instructions for handling API keys and authentication tokens, specifically emphasizing that these secrets should remain in environment variables or the dashboard and never be shared in the chat history.
Audit Metadata
Risk Level
SAFE
Analyzed
Oct 23, 2026, 10:46 PM