gcalcli-calendar

Pass

Audited by Gen Agent Trust Hub on May 14, 2026

Risk Level: SAFECOMMAND_EXECUTIONEXTERNAL_DOWNLOADS
Full Analysis
  • [COMMAND_EXECUTION]: The skill invokes the gcalcli binary to perform calendar tasks. It utilizes the --iamaexpert flag for non-interactive deletions, which is a native feature of the tool used for automation and is clearly documented within the skill's instructions.
  • [EXTERNAL_DOWNLOADS]: The skill requires the gcalcli package, which users are directed to install via official package managers such as pip or Homebrew.
  • [DATA_EXFILTRATION]: Network traffic is confined to official Google API domains (googleapis.com) for the purpose of synchronizing calendar data, aligning with the skill's intended functionality.
Audit Metadata
Risk Level
SAFE
Analyzed
May 14, 2026, 12:14 AM
Security Audit — agent-trust-hub — gcalcli-calendar