ClawHub
Back to skill

Security audit

Tmp.QXUaaUoKqg

Security checks across malware telemetry and agentic risk

Overview

This Eventbrite skill is a read-only set of shell recipes for Eventbrite data, with sensitive access disclosed and aligned to its purpose.

Install only if you are comfortable letting your agent run read-only Eventbrite API calls with your OAuth token or signed-in browser session. Treat tokens, cookies, attendee names, emails, order data, and command output as sensitive, and review fpx/Transporter pairing because it persists after approval.

SkillSpector

By NVIDIA
Vulnerability Patterns
  • Data ExfiltrationExternal Transmission, Env Variable Harvesting, File System Enumeration
  • Prompt InjectionInstruction Override, Hidden Instructions, Exfiltration Commands
  • Privilege EscalationExcessive Permissions, Sudo/Root Execution, Credential Access
  • Supply ChainUnpinned Dependencies, External Script Fetching, Obfuscated Code
  • Excessive AgencyUnrestricted Tool Access, Autonomous Decision Making, Scope Creep
Findings (4)

Missing User Warnings

Medium
Confidence
93% confidence
Finding
The skill explicitly documents using the browser's authenticated Eventbrite session to access `/api/v3/users/me/orders/` and similar endpoints, but it does not warn that this exposes personal account data and organization data from the currently signed-in browser profile. In an agent skill context, this can lead users to unknowingly authorize retrieval of sensitive order, attendee, or account information through a local browser bridge, especially because the same section frames it as convenient when no token is configured.

Missing User Warnings

Medium
Confidence
89% confidence
Finding
The skill instructs readers to read the `csrftoken` cookie from the browser profile via `fpx cookies`, but provides no warning that this accesses browser session state. Even though a CSRF token is not equivalent to a password, documenting cookie extraction in an agent-accessible skill normalizes access to browser cookies and can enable unintended use of authenticated session context or broaden the bridge's access to session-derived secrets.

Missing User Warnings

Medium
Confidence
87% confidence
Finding
The documentation explicitly provides organizer-side attendee and order queries that return personal data such as names and email addresses, but gives no guidance on minimizing collection, protecting output, or avoiding accidental disclosure in logs and terminals. In a shell-oriented skill, this increases the chance that operators will fetch and expose PII without understanding the sensitivity or access-control implications.

Missing User Warnings

Low
Confidence
75% confidence
Finding
The file instructs users to supply a bearer token via an environment variable but does not clearly identify it as a secret credential or warn against exposing it in scripts, shared shells, logs, or process listings. While using an environment variable is common practice, omitting credential-safety guidance in copy-paste shell documentation can lead to accidental token leakage and unauthorized API access.

VirusTotal

62/62 vendors flagged this skill as clean.

View on VirusTotal

Static analysis

No suspicious patterns detected.