google-calendar

Warn

Audited by Socket on Jun 28, 2026

1 alert found:

Anomaly
AnomalyLOW
SKILL.md

SUSPICIOUS: the skill's purpose and capabilities are internally consistent, but it routes Google Calendar access through ClawLink rather than official Google APIs and requires trusting a third-party CLI plus hosted credential broker with sensitive calendar data and write access. This is a medium/high security risk from intermediary data flow and credential forwarding, not confirmed malware.

Confidence: 84%Severity: 69%
Audit Metadata
Analyzed At
Jun 28, 2026, 02:44 PM
Package URL
pkg:socket/skills-sh/clawlink-hq%2Fskills%2Fgoogle-calendar%2F@5bf1403dd7326cdad53681ae074feba1f4ebd60d6ff3011e70e1b4adea7fe324
Security Audit — socket — google-calendar