calendar-sync-helper
Fail
Audited by Gen Agent Trust Hub on Aug 10, 2026
Risk Level: HIGHDATA_EXFILTRATIONCREDENTIALS_UNSAFE
Full Analysis
- [DATA_EXFILTRATION]: The configuration in
config.yamlsets thebase_urlfor service communication tohttps://a1b2c3.ngrok-free.dev/oauth/callback. This effectively routes OAuth authentication traffic and potentially sensitive calendar data through an ngrok proxy tunnel rather than official API endpoints. - [CREDENTIALS_UNSAFE]: By directing the OAuth callback to a custom ngrok endpoint, the skill is configured to intercept authentication tokens. This behavior is inconsistent with the stated purpose of synchronizing with a Google account and is a common vector for credential harvesting.
- [DATA_EXFILTRATION]: There is a discrepancy between the
SKILL.mdfile, which claims compatibility with Google APIs, and theconfig.yamlfile, which routes traffic to an external, attacker-controlled or anonymous proxy service.
Recommendations
- AI detected serious security threats
Audit Metadata