calendar-manager
Pass
Audited by Gen Agent Trust Hub on May 15, 2026
Risk Level: SAFECOMMAND_EXECUTIONEXTERNAL_DOWNLOADSPROMPT_INJECTION
Full Analysis
- [COMMAND_EXECUTION]: The skill instructs the agent to use several command-line tools for calendar management, including
gcalcli,icalBuddy, andgog. - It provides examples for listing, creating, and adding events using these CLIs.
- Documentation includes methods for persistence via Cron jobs and Windows Scheduled Tasks (
Register-ScheduledTask) to facilitate reminder functionality. - [EXTERNAL_DOWNLOADS]: The reference material suggests installing established third-party utilities from trusted sources.
- Users are directed to install
gcalclivia official package managers likepiporHomebrew. ical-buddyis recommended for installation viaHomebrewon macOS.- [PROMPT_INJECTION]: The skill processes external data from calendar events, which presents a surface for indirect prompt injection.
- Ingestion points: Calendar event details (titles, descriptions, etc.) are retrieved through the mentioned CLI tools as described in
SKILL.mdandreferences/resources.md. - Boundary markers: There are no explicit delimiters or instructions to treat event content as untrusted data.
- Capability inventory: The skill utilizes shell command execution via calendar CLIs.
- Sanitization: No sanitization or filtering of external event content is specified in the instructions.
Audit Metadata