run-crew-and-volunteers
Pass
Audited by Gen Agent Trust Hub on Oct 23, 2026
Risk Level: SAFE
Full Analysis
- [SAFE]: The skill utilizes official vendor resources, including the
ticketfairyCLI (available via NPM) and the Ticket Fairy MCP server atticketfairy.com. These tools are intended for use by event organizers and are consistent with the skill's stated purpose.- [INDIRECT_PROMPT_INJECTION]: The skill handles potentially untrusted data from volunteer application forms and rota spreadsheets. This risk is mitigated through explicit instructions requiring the agent to obtain human approval before performing any write operations or sending communications.- [DATA_EXFILTRATION]: The skill provides instructions for handling API keys and authentication tokens, specifically emphasizing that these secrets should remain in environment variables or the dashboard and never be shared in the chat history.
Audit Metadata