eventbrite
Pass
Audited by Gen Agent Trust Hub on Sep 23, 2026
Risk Level: SAFEEXTERNAL_DOWNLOADSCOMMAND_EXECUTIONINDIRECT_PROMPT_INJECTION
Full Analysis
- [EXTERNAL_DOWNLOADS]: The skill uses npx to download and execute the @useclawlink/cli package from the NPM registry. This package is an official resource provided by the skill's author, clawlink-hq.
- [COMMAND_EXECUTION]: The skill's primary functionality is delivered through shell commands that manage authentication and interact with the Eventbrite API via the command line.
- [INDIRECT_PROMPT_INJECTION]: 1. Ingestion points: User-supplied natural language queries and JSON data are passed to the CLI commands in SKILL.md. 2. Boundary markers: There are no explicit delimiters or warnings to ignore instructions embedded within the user data. 3. Capability inventory: The skill utilizes shell commands that may perform network operations and file writes (~/.clawlink/credentials.json). 4. Sanitization: No input validation or sanitization routines are described in the instructions.
Audit Metadata