plan-the-running-order-and-show-day
Pass
Audited by Gen Agent Trust Hub on Oct 23, 2026
Risk Level: SAFEINDIRECT_PROMPT_INJECTIONEXTERNAL_DOWNLOADSCOMMAND_EXECUTION
Full Analysis
- [INDIRECT_PROMPT_INJECTION]: The skill is designed to ingest and process external data, such as event guides and metadata from the Ticket Fairy platform, which may contain untrusted content.
- Ingestion points: Data retrieved via the
get_guidetool and user-provided variables for events and acts. - Boundary markers: The skill provides clear behavioral guidelines for the agent to follow regarding secrets and consent, though it does not specify technical delimiters for interpolated data.
- Capability inventory: Includes the ability to modify event states, manage show cues, and publish lineups through the CLI and MCP tools.
- Sanitization: No specific technical sanitization or validation of the ingested content is described.
- [EXTERNAL_DOWNLOADS]: The instructions direct the user to install the official
ticketfairypackage from npm. This is a standard distribution method for the toolset required for the skill's primary function. - [COMMAND_EXECUTION]: The skill utilizes a CLI for event operations and account authentication, which is necessary for the intended use-case of managing the Ticket Fairy dashboard programmatically.
Audit Metadata