Upcoming Concerts
PassAudited by ClawScan on May 1, 2026.
Overview
This skill appears to do what it claims: it runs a small Python script to query Ticketmaster for concert listings using the user's Ticketmaster API key.
This looks safe to install if you are comfortable providing a Ticketmaster API key. Searches and the API key are sent to Ticketmaster; avoid exposing logs or URLs that may contain the key. The provided artifacts show no persistence, file modification, destructive behavior, or hidden data collection.
Findings (2)
Artifact-based informational review of SKILL.md, metadata, install specs, static scan signals, and capability signals. ClawScan does not execute the skill or run runtime probes.
Search filters such as city, country, artist, genre, and date range are sent to Ticketmaster to retrieve results.
The script makes an outbound request to the Ticketmaster Discovery API. This is disclosed and directly aligned with searching for concerts.
API_BASE = "https://app.ticketmaster.com/discovery/v2/events.json" ... urllib.request.urlopen(req)
Use this skill for searches you are comfortable sending to Ticketmaster, and review command arguments before invoking it.
Your Ticketmaster developer key is used for searches and could affect your Ticketmaster API quota if exposed elsewhere.
The script reads the Ticketmaster API key from the environment and includes it in the Ticketmaster request parameters, which is expected for this API integration.
api_key = os.environ.get("TICKETMASTER_API_KEY") ... "apikey": api_keyUse a dedicated Ticketmaster API key, keep it out of shared logs or transcripts, and rotate it if you suspect exposure.