The Agent Skills Directory

[EXTERNAL_DOWNLOADS]: The skill utilizes the googlecalendar-client and google-oauth packages from the Mops registry (mops.one). These are standard libraries for Motoko development. The automated phishing alerts for the mops.one domain are identified as false positives, as this is the official and legitimate domain for the platform's package manager.
[SAFE]: The skill incorporates several high-standard security measures for handling third-party integrations:
OAuth 2.0 with PKCE: It implements Proof Key for Code Exchange, which is the industry standard for securing authorization flows against interception attacks.
Credential Isolation: The skill ensures that sensitive credentials, such as the Client Secret and bearer tokens, are stored and used only within the backend canister and are never exposed to the frontend or the user.
Non-replicated Execution: The instructions mandate setting is_replicated = ?false for all HTTP outcalls that carry authorization headers. This follows the Internet Computer security best practice of ensuring sensitive tokens are only processed by a single node to minimize the risk of credential leakage.
Access Control: The configuration of global credentials is restricted to the #admin role, and user-specific operations require an authenticated Principal, effectively preventing unauthorized access.

connector-googlecalendar