work-with-fai

Pass

Audited by Gen Agent Trust Hub on Oct 23, 2026

Risk Level: SAFEEXTERNAL_DOWNLOADSCOMMAND_EXECUTION
Full Analysis
  • [EXTERNAL_DOWNLOADS]: The skill instructs the agent to install the official ticketfairy package from the NPM registry using npm install -g ticketfairy. This is a verified vendor resource belonging to the author.
  • [COMMAND_EXECUTION]: The skill utilizes the official ticketfairy CLI tool for various administrative tasks, such as ticketfairy login, ticketfairy brand use, and ticketfairy ticket create. These operations are performed within the scope of the vendor's own command-line interface and require explicit user approval for state-changing actions.
  • [REMOTE_CODE_EXECUTION]: The skill connects to a vendor-controlled Model Context Protocol (MCP) server at https://www.ticketfairy.com/docs/mcp to fetch documentation and guides. This facilitates structured data retrieval from the official platform.
  • [CREDENTIALS_SAFE]: The skill references the use of a TICKET_FAIRY_API_KEY environment variable for authentication. This follows standard security practices for API key management and explicitly warns against sharing secrets within the chat context.
Audit Metadata
Risk Level
SAFE
Analyzed
Oct 23, 2026, 10:46 PM