Turn ICS calendar invites and feeds into structured events for scheduling automations

Pass

Audited by Gen Agent Trust Hub on Oct 25, 2026

Risk Level: SAFENO_CODEINDIRECT_PROMPT_INJECTION
Full Analysis
  • [NO_CODE]: The skill does not contain any executable scripts, tool definitions, or specific prompt instructions for the agent to follow. It provides descriptive metadata and links to the 'node-ical' npm package.
  • [INDIRECT_PROMPT_INJECTION]: The skill's intended use case involves parsing raw .ics files and external calendar feeds, which are untrusted data sources. Maliciously crafted calendar events could contain instructions designed to influence an agent's behavior if the parsed output is used for further automation.
  • Ingestion points: External .ics files and subscription URLs mentioned in SKILL.md.
  • Boundary markers: None provided in the skill documentation.
  • Capability inventory: No capabilities or tools are implemented in this skill file.
  • Sanitization: No sanitization or filtering logic is specified.
Audit Metadata
Risk Level
SAFE
Analyzed
Oct 25, 2026, 09:08 AM