manage-venue-pages
Pass
Audited by Gen Agent Trust Hub on Oct 23, 2026
Risk Level: SAFEEXTERNAL_DOWNLOADSCOMMAND_EXECUTIONINDIRECT_PROMPT_INJECTION
Full Analysis
- [EXTERNAL_DOWNLOADS]: The skill instructs the user or agent to install the official command-line interface via
npm install -g ticketfairy. The package is a vendor-owned resource originating from the public NPM registry. - [COMMAND_EXECUTION]: The skill leverages the
ticketfairyCLI to perform operations such as authentication status checks, brand listing, and starting a local MCP server. It correctly recommends the use of--output jsonand--non-interactiveflags for programmatic execution. - [INDIRECT_PROMPT_INJECTION]: The skill dynamically fetches and processes content from external guides via an MCP server at
https://www.ticketfairy.com/docs/mcp. - Ingestion points: External content is brought into the agent's context through the
search_guidesandget_guidetools. - Boundary markers: The skill does not explicitly define delimiters for the ingested documentation content.
- Capability inventory: The skill can execute CLI commands, switch brands, and suggest prompts for the 'Fai' dashboard assistant.
- Sanitization: While the content originates from the official vendor domain, no specific sanitization or escaping of the fetched documentation is described.
Audit Metadata