follow-event-type-playbooks

Pass

Audited by Gen Agent Trust Hub on Oct 23, 2026

Risk Level: SAFEEXTERNAL_DOWNLOADSCOMMAND_EXECUTIONINDIRECT_PROMPT_INJECTION
Full Analysis
  • [EXTERNAL_DOWNLOADS]: The skill instructs the agent to install the official Ticket Fairy CLI using npm install -g ticketfairy. This package is the standard tool provided by the vendor for platform management.
  • [COMMAND_EXECUTION]: The skill provides numerous examples of using the ticketfairy CLI to perform administrative tasks, such as creating ticket releases (ticketfairy ticket create), cloning events (ticketfairy event clone), and checking attendee status (ticketfairy checkin status). These commands are intended for use by event organizers to manage their data.
  • [INDIRECT_PROMPT_INJECTION]: The skill is designed to fetch and follow external playbooks via the get_guide and search_guides tools from the Ticket Fairy MCP server at https://www.ticketfairy.com/docs/mcp. While this allows the agent to ingest external instructions, the data source is the official vendor documentation site.
  • Ingestion points: External playbooks are retrieved via MCP tool calls to ticketfairy.com.
  • Boundary markers: The skill includes instructions to read the guide before acting and to confirm actions with the organizer.
  • Capability inventory: The skill has capabilities for file system access (CLI installation), network access (API communication), and data modification (event management).
  • Sanitization: The skill emphasizes organizer approval and the use of official templates, reducing the risk of malicious instruction execution.
Audit Metadata
Risk Level
SAFE
Analyzed
Oct 23, 2026, 10:46 PM