calendar-manager

Pass

Audited by Gen Agent Trust Hub on May 15, 2026

Risk Level: SAFECOMMAND_EXECUTIONEXTERNAL_DOWNLOADSPROMPT_INJECTION
Full Analysis
  • [COMMAND_EXECUTION]: The skill instructs the agent to use several command-line tools for calendar management, including gcalcli, icalBuddy, and gog.
  • It provides examples for listing, creating, and adding events using these CLIs.
  • Documentation includes methods for persistence via Cron jobs and Windows Scheduled Tasks (Register-ScheduledTask) to facilitate reminder functionality.
  • [EXTERNAL_DOWNLOADS]: The reference material suggests installing established third-party utilities from trusted sources.
  • Users are directed to install gcalcli via official package managers like pip or Homebrew.
  • ical-buddy is recommended for installation via Homebrew on macOS.
  • [PROMPT_INJECTION]: The skill processes external data from calendar events, which presents a surface for indirect prompt injection.
  • Ingestion points: Calendar event details (titles, descriptions, etc.) are retrieved through the mentioned CLI tools as described in SKILL.md and references/resources.md.
  • Boundary markers: There are no explicit delimiters or instructions to treat event content as untrusted data.
  • Capability inventory: The skill utilizes shell command execution via calendar CLIs.
  • Sanitization: No sanitization or filtering of external event content is specified in the instructions.
Audit Metadata
Risk Level
SAFE
Analyzed
May 15, 2026, 05:22 AM
Security Audit — agent-trust-hub — calendar-manager