ticketmaster

Warn

Audited by Socket on Oct 25, 2026

1 alert found:

Security
SecurityMEDIUM
SKILL.md

SUSPICIOUS. The functional scope mostly matches a Ticketmaster ticket-search skill, and there is no direct malware behavior, secret-file access, or purchase automation. But the undocumented local `ticketmaster` binary is an unverifiable dependency, the 'no user setup' claim obscures how official API access is obtained, and the skill accepts third-party affiliate redirect URLs rather than only first-party Ticketmaster links.

Confidence: 84%Severity: 74%
Audit Metadata
Analyzed At
Oct 25, 2026, 01:36 PM
Package URL
pkg:socket/skills-sh/win4r%2Fmuseai-skills%2Fticketmaster%2F@3ddc94722ad9317ee1b3f5ac76dc20d19cc7723305f229bb7b3f8de264705fe8