follow-event-type-playbooks
Pass
Audited by Gen Agent Trust Hub on Oct 23, 2026
Risk Level: SAFEEXTERNAL_DOWNLOADSCOMMAND_EXECUTIONINDIRECT_PROMPT_INJECTION
Full Analysis
- [EXTERNAL_DOWNLOADS]: The skill instructs the agent to install the official Ticket Fairy CLI using
npm install -g ticketfairy. This package is the standard tool provided by the vendor for platform management. - [COMMAND_EXECUTION]: The skill provides numerous examples of using the
ticketfairyCLI to perform administrative tasks, such as creating ticket releases (ticketfairy ticket create), cloning events (ticketfairy event clone), and checking attendee status (ticketfairy checkin status). These commands are intended for use by event organizers to manage their data. - [INDIRECT_PROMPT_INJECTION]: The skill is designed to fetch and follow external playbooks via the
get_guideandsearch_guidestools from the Ticket Fairy MCP server athttps://www.ticketfairy.com/docs/mcp. While this allows the agent to ingest external instructions, the data source is the official vendor documentation site. - Ingestion points: External playbooks are retrieved via MCP tool calls to
ticketfairy.com. - Boundary markers: The skill includes instructions to read the guide before acting and to confirm actions with the organizer.
- Capability inventory: The skill has capabilities for file system access (CLI installation), network access (API communication), and data modification (event management).
- Sanitization: The skill emphasizes organizer approval and the use of official templates, reducing the risk of malicious instruction execution.
Audit Metadata