pp-eventbrite

SUSPICIOUS. The core Eventbrite capabilities and credential scope fit the stated purpose, and installs appear to come from the same publisher via npm/Go rather than an unrelated host. Risk remains medium because the skill depends on custom binaries, forwards an Eventbrite token to them, supports arbitrary webhook delivery of potentially sensitive attendee/order data, and includes transitive MCP installation.