run-event-production
Pass
Audited by Gen Agent Trust Hub on Oct 23, 2026
Risk Level: SAFEEXTERNAL_DOWNLOADSCOMMAND_EXECUTIONINDIRECT_PROMPT_INJECTION
Full Analysis
- [EXTERNAL_DOWNLOADS]: The skill provides instructions to install the official
ticketfairyCLI tool using the commandnpm install -g ticketfairy. This is a vendor-owned package hosted on the NPM registry. - [COMMAND_EXECUTION]: The skill makes extensive use of the
ticketfairyCLI to manage events, including listing events, fetching event details, drafting and sending messages to attendees/staff, and managing tasks. It also mentions running an MCP server via the CLI. - [INDIRECT_PROMPT_INJECTION]: The skill processes untrusted external data, which creates a surface for indirect prompt injection attacks.
- Ingestion points: The skill reads attendee feedback, email conversations from connected mailboxes, and call notes (SKILL.md).
- Boundary markers: There are no instructions to use specific delimiters or prompts to ignore instructions embedded within the processed external data.
- Capability inventory: The skill has the ability to send emails and texts (
ticketfairy event-os messages send), create/modify tasks, and change event configurations (SKILL.md). - Sanitization: No explicit sanitization or validation of external content is mentioned before the data is processed by the AI.
Audit Metadata