run-event-workflows
Pass
Audited by Gen Agent Trust Hub on Oct 23, 2026
Risk Level: SAFEEXTERNAL_DOWNLOADSCOMMAND_EXECUTIONINDIRECT_PROMPT_INJECTION
Full Analysis
- [EXTERNAL_DOWNLOADS]: The skill instructs the installation of the official
ticketfairyCLI from the NPM registry. This is a legitimate tool provided by the author to interact with their platform. - [INDIRECT_PROMPT_INJECTION]: The skill consumes data from external guides hosted on the vendor's website via an MCP server (
https://www.ticketfairy.com/docs/mcp). The skill includes robust safeguards, instructing the agent to read guides fully and obtain explicit human confirmation before executing any commands or making changes to live events, effectively mitigating risks from potentially untrusted content. - [COMMAND_EXECUTION]: The skill documents the use of various CLI commands to manage events, such as cloning, postponing, and cancelling. These are intended functionalities of the platform's official toolset and require prior authentication and explicit authorization by the user for each action.
Audit Metadata