sell-passes-and-extras

MEDIUM W011: Third-party content exposure detected (indirect prompt injection risk).

• Third-party content exposure detected (low risk: 0.10). The required workflow involves searching and reading guides from https://www.ticketfairy.com/docs/mcp and fetching specific guide URLs, which represents low-risk active retrieval of external content.

MEDIUM W009: Direct money access capability detected (payment gateways, crypto, banking).

• Direct money access detected (medium risk: 0.30). The skill documents operational management of ticket extras, add-ons, hotel blocks, passes, and VIP tables on Ticket Fairy (creating items, setting prices, updating stock, and publishing events). These actions constitute indirect financial operations (creating billable items/usage/listings for downstream checkout). Ticket payments themselves are explicitly handled by buyers via a separate checkout and are out of scope for the agent (SKILL.md:38-40). Since no direct financial operations are performed by the skill, severity is medium.