calendly-automation

SUSPICIOUS. The skill’s capabilities mostly match its stated Calendly automation purpose, but it routes sensitive scheduling data and OAuth-backed actions through a third-party hosted MCP service and relies on stale/discontinued Rube setup instructions. This is not confirmed malware, but it carries medium security risk due to remote service trust and real-world action capability.