google-calendar
Pass
Audited by Gen Agent Trust Hub on Sep 18, 2026
Risk Level: SAFECOMMAND_EXECUTIONEXTERNAL_DOWNLOADS
Full Analysis
- [EXTERNAL_DOWNLOADS]: The skill mentions and provides instructions for installing the
@googleworkspace/clitool from the official Google Workspace GitHub repository and NPM registry. These are well-known, official sources for managing Workspace services. - [COMMAND_EXECUTION]: The skill uses
curl,jq, and thegwsCLI to interact with the Google Calendar API. All shell commands are targeted at official Google API endpoints (www.googleapis.com) or the local CLI environment. - [CREDENTIALS_SAFE]: The skill correctly handles sensitive OAuth tokens by using environment variables (
$GOOGLE_CALENDAR_TOKEN) rather than hardcoding credentials. It includes explicit instructions never to log or echo the token. - [SAFE]: The skill incorporates safety best practices by instructing the agent to confirm event details with the user before performing destructive operations (create, update, delete). It also correctly handles and surfaces API errors to the user.
Audit Metadata