Eventbrite

PassAudited by ClawScan on May 1, 2026.

Overview

This Eventbrite integration is purpose-aligned, but it uses a Maton API key and managed OAuth to access and modify Eventbrite account data, so users should review account scope before use.

This skill appears coherent for managing Eventbrite through Maton. Before installing, make sure you trust Maton with the connected Eventbrite account, keep the MATON_API_KEY private, specify the intended connection when multiple accounts exist, and only approve write operations after checking the exact account and resource being changed.

Findings (3)

Artifact-based informational review of SKILL.md, metadata, install specs, static scan signals, and capability signals. ClawScan does not execute the skill or run runtime probes.

What this means

Anyone or any agent using this key through the skill can access the connected Eventbrite account within the documented scope.

Why it was flagged

The skill requires a bearer API key that authorizes access to the user's managed Eventbrite connection.

Skill content
All requests require the Maton API key in the Authorization header: Authorization: Bearer $MATON_API_KEY
Recommendation

Use a Maton key tied only to the intended Eventbrite account, avoid sharing it, and revoke or rotate it if it may have been exposed.

What this means

Approved write operations could create, update, or delete Eventbrite resources such as events or venues.

Why it was flagged

The skill supports account-changing Eventbrite operations, but the artifact instructs the agent to get approval before writes.

Skill content
All write operations require explicit user approval. Before executing any create, update, or delete call, confirm the target resource and intended effect with the user.
Recommendation

Before approving any write, confirm the Eventbrite account, connection ID, target resource, and exact change.

What this means

Eventbrite account data, including orders or attendee information requested through the API, may be processed through Maton as part of the integration.

Why it was flagged

The skill routes Eventbrite API traffic through Maton as a managed OAuth gateway, so Eventbrite requests and responses pass through a third-party service.

Skill content
Maton proxies requests to `www.eventbriteapi.com` and automatically injects your OAuth token.
Recommendation

Use this only if you trust Maton to handle your Eventbrite OAuth connection and account data, and review Maton connection settings periodically.