start-organising-events
Pass
Audited by Gen Agent Trust Hub on Oct 23, 2026
Risk Level: SAFEEXTERNAL_DOWNLOADSCOMMAND_EXECUTION
Full Analysis
- [EXTERNAL_DOWNLOADS]: The skill interacts with vendor-owned API endpoints at
theticketfairy.comto retrieve public subscription plan information and manage event drafts. These requests are within the expected scope of the skill's functionality. - [COMMAND_EXECUTION]: The skill utilizes HTTP methods including POST, PATCH, and GET to interact with the Ticket Fairy platform. These operations are used to create event drafts and fetch product comparison data.
- [CREDENTIALS_UNSAFE]: While the skill involves handling an
X-Guest-Draft-Tokenissued by the API, it explicitly mandates that the agent must keep this token private, never include it in URLs, and never disclose it to the user. Furthermore, it contains clear instructions to keep passwords, 2FA codes, and other sensitive authentication steps entirely within the user's browser, preventing data exposure to the chat context.
Audit Metadata