pp-eventbrite
Pass
Audited by Gen Agent Trust Hub on Aug 28, 2026
Risk Level: SAFEEXTERNAL_DOWNLOADSCOMMAND_EXECUTIONINDIRECT_PROMPT_INJECTION
Full Analysis
- [EXTERNAL_DOWNLOADS]: The skill downloads and installs software from the mvanhorn GitHub repository and npm organization, which are resources associated with the skill's author context.
- [COMMAND_EXECUTION]: The skill utilizes a CLI that can execute shell commands and route data to various sinks, including local files and remote webhooks via the --deliver parameter.
- [INDIRECT_PROMPT_INJECTION]: The skill ingests data from the Eventbrite API which constitutes a potential attack surface. 1. Ingestion points: Organizer endpoints for events, orders, and attendees. 2. Boundary markers: None identified in the prompt interpolation instructions. 3. Capability inventory: Execution of bash commands, file system writes, and network POST requests. 4. Sanitization: No explicit validation or escaping of ingested data is documented.
Audit Metadata