google-calendar

Pass

Audited by Gen Agent Trust Hub on Sep 18, 2026

Risk Level: SAFECOMMAND_EXECUTIONEXTERNAL_DOWNLOADS
Full Analysis
  • [EXTERNAL_DOWNLOADS]: The skill mentions and provides instructions for installing the @googleworkspace/cli tool from the official Google Workspace GitHub repository and NPM registry. These are well-known, official sources for managing Workspace services.
  • [COMMAND_EXECUTION]: The skill uses curl, jq, and the gws CLI to interact with the Google Calendar API. All shell commands are targeted at official Google API endpoints (www.googleapis.com) or the local CLI environment.
  • [CREDENTIALS_SAFE]: The skill correctly handles sensitive OAuth tokens by using environment variables ($GOOGLE_CALENDAR_TOKEN) rather than hardcoding credentials. It includes explicit instructions never to log or echo the token.
  • [SAFE]: The skill incorporates safety best practices by instructing the agent to confirm event details with the user before performing destructive operations (create, update, delete). It also correctly handles and surfaces API errors to the user.
Audit Metadata
Risk Level
SAFE
Analyzed
Sep 18, 2026, 05:11 PM