set-up-event-tickets
Pass
Audited by Gen Agent Trust Hub on Oct 23, 2026
Risk Level: SAFECOMMAND_EXECUTIONEXTERNAL_DOWNLOADSINDIRECT_PROMPT_INJECTION
Full Analysis
- [SAFE]: The skill contains strong security-focused instructions, including a specific rule to keep secrets like tokens and passwords out of the chat context and to use standard secret management practices for API keys stored in environment variables.\n- [COMMAND_EXECUTION]: Describes using the official
ticketfairyCLI and MCP tools to perform actions like creating events, managing ticket types, and processing orders. It emphasizes obtaining explicit user approval before any write operations.\n- [EXTERNAL_DOWNLOADS]: Directs the installation of the official Ticket Fairy CLI via the npm package manager.\n- [INDIRECT_PROMPT_INJECTION]: The skill has an attack surface where untrusted user input or external data retrieved from documentation guides could influence agent actions.\n - Ingestion points: User-provided event names, descriptions, and ticket details; guide content fetched via the
get_guideandsearch_guidesMCP tools.\n - Boundary markers: None specified for input interpolation.\n
- Capability inventory: High-impact capabilities including CLI and MCP tools for creating, updating, and deleting events/tickets, and marking orders as paid.\n
- Sanitization: No specific sanitization or escaping mechanisms are described for untrusted input.
Audit Metadata