Eventbrite

PassAudited by VirusTotal on May 12, 2026.

Overview

Type: OpenClaw Skill Name: eventbrite Version: 1.0.3 The eventbrite skill provides a standard integration for the Eventbrite API using a managed OAuth proxy service (api.maton.ai). The SKILL.md file contains transparent Python snippets using urllib to perform CRUD operations on events, venues, and attendees. It includes explicit safety instructions for the AI agent to require user approval for write operations and lacks any indicators of data exfiltration, obfuscation, or malicious execution.

Findings (0)

Artifact-based informational review of SKILL.md, metadata, install specs, static scan signals, and capability signals. ClawScan does not execute the skill or run runtime probes.

What this means

Anyone or any agent using this key through the skill can access the connected Eventbrite account within the documented scope.

Why it was flagged

The skill requires a bearer API key that authorizes access to the user's managed Eventbrite connection.

Skill content
All requests require the Maton API key in the Authorization header: Authorization: Bearer $MATON_API_KEY
Recommendation

Use a Maton key tied only to the intended Eventbrite account, avoid sharing it, and revoke or rotate it if it may have been exposed.

What this means

Approved write operations could create, update, or delete Eventbrite resources such as events or venues.

Why it was flagged

The skill supports account-changing Eventbrite operations, but the artifact instructs the agent to get approval before writes.

Skill content
All write operations require explicit user approval. Before executing any create, update, or delete call, confirm the target resource and intended effect with the user.
Recommendation

Before approving any write, confirm the Eventbrite account, connection ID, target resource, and exact change.

What this means

Eventbrite account data, including orders or attendee information requested through the API, may be processed through Maton as part of the integration.

Why it was flagged

The skill routes Eventbrite API traffic through Maton as a managed OAuth gateway, so Eventbrite requests and responses pass through a third-party service.

Skill content
Maton proxies requests to `www.eventbriteapi.com` and automatically injects your OAuth token.
Recommendation

Use this only if you trust Maton to handle your Eventbrite OAuth connection and account data, and review Maton connection settings periodically.