ticketmaster

Warn

Audited by Socket on Oct 8, 2026

1 alert found:

Security
SecurityMEDIUM
SKILL.md

SUSPICIOUS. The functional scope mostly matches a Ticketmaster ticket-search skill, and there is no direct malware behavior, secret-file access, or purchase automation. But the undocumented local `ticketmaster` binary is an unverifiable dependency, the 'no user setup' claim obscures how official API access is obtained, and the skill accepts third-party affiliate redirect URLs rather than only first-party Ticketmaster links.

Confidence: 84%Severity: 74%
Audit Metadata
Analyzed At
Oct 8, 2026, 11:46 PM
Package URL
pkg:socket/skills-sh/obra%2Fmuse-skills%2Fticketmaster%2F@91f160d7a84386c95af4a9b4a80f95f63160e7ba08b9f0c3463f8e2a2f4848e0