eventee
Pass
Audited by Gen Agent Trust Hub on May 1, 2026
Risk Level: SAFECOMMAND_EXECUTIONEXTERNAL_DOWNLOADS
Full Analysis
- [COMMAND_EXECUTION]: The skill instructs the agent to use the
membraneCLI for managing connections and executing actions on the Eventee platform. These commands are standard for the tool's operation. - [EXTERNAL_DOWNLOADS]: The skill suggests installing the
@membranehq/clipackage from npm, which is the official CLI tool provided by the vendor (membrane) for this integration. - [DATA_EXPOSURE]: The instructions emphasize using the platform's connection management instead of handling raw API keys, which aligns with security best practices for credential management.
- [METADATA_POISONING]: The skill description contains references to CRM entities like 'Deals' and 'Leads' which are inconsistent with the Eventee event management service. This appears to be a documentation error rather than a malicious attempt to deceive.
Audit Metadata