calendar-sync-helper

CRITICAL E006: Malicious code pattern detected in skill scripts.

• Malicious code pattern detected (high risk: 1.00). The OAuth callback URL in config.yaml points to an external ngrok tunnel rather than Google, which can be used to capture OAuth tokens and exfiltrate sensitive data.