manage-brand-and-team
Pass
Audited by Gen Agent Trust Hub on Oct 23, 2026
Risk Level: SAFECOMMAND_EXECUTIONEXTERNAL_DOWNLOADSINDIRECT_PROMPT_INJECTION
Full Analysis
- [COMMAND_EXECUTION]: The skill provides instructions for using the official
ticketfairyCLI to perform brand and team management tasks. All operations, including role updates and invitations, are designed to be executed with the user's explicit permission and follow a human-in-the-loop workflow. - [EXTERNAL_DOWNLOADS]: The skill facilitates the installation of the official
ticketfairypackage from the well-known npm registry. This is an expected and standard method for accessing the vendor's official command-line tools. - [INDIRECT_PROMPT_INJECTION]: The skill possesses an attack surface for indirect prompt injection because it ingests data from external guides and promoter applications. This risk is mitigated by explicit instructions requiring the agent to show planned changes and wait for human confirmation before performing any modifications, refunds, or invitations based on external data.
Audit Metadata