skills/mvanhorn/printing-press-library/pp-eventbrite/Socket

pp-eventbrite

Warn

Audited by Socket on Jul 12, 2026

1 alert found:

Anomaly

AnomalySKILL.md

LOW

AnomalyLOW

SKILL.md

SUSPICIOUS: the skill is largely aligned with its Eventbrite admin/analytics purpose and uses same-publisher install sources, but it expands trust to external binaries, includes transitive installer behavior, and supports arbitrary outbound webhook delivery of sensitive attendee/order data. This looks more like a high-risk automation skill than outright malware.

Confidence: 84%Severity: 61%

Audit Metadata

Analyzed At

Jul 12, 2026, 06:20 AM

Package URL

pkg:socket/skills-sh/mvanhorn%2Fprinting-press-library%2Fpp-eventbrite%2F@236cb6630058308f63f38e22d8f84c6c7f1fae1cd2ff363106a4ff8cf1769e2b