eventbrite
Pass
Audited by Gen Agent Trust Hub on Jun 28, 2026
Risk Level: SAFE
Full Analysis
- [EXTERNAL_DOWNLOADS]: The skill instructs the agent to use
npx @useclawlink/cli, which downloads and executes the ClawLink CLI package from the official NPM registry. This is the intended delivery mechanism for the vendor's integration tools. - [COMMAND_EXECUTION]: The skill uses shell commands (
npx) to facilitate login, connection, and execution of Eventbrite actions. These commands are scoped to the functionality of the@useclawlink/clitool. - [PROMPT_INJECTION]: As the skill is designed to read data from external Eventbrite events (descriptions, custom questions, etc.), it possesses an indirect prompt injection surface. Maliciously crafted content in an Eventbrite account could theoretically attempt to influence the agent's behavior during a session. Mitigation involves the agent's inherent safety guardrails and the skill's instruction to confirm with the user before performing any write operations.
- [DATA_EXPOSURE]: The skill manages credentials locally at
~/.clawlink/credentials.json. This is a standard practice for CLI tools to maintain session state and does not represent an unauthorized exposure of sensitive information.
Audit Metadata