The Agent Skills Directory

[EXTERNAL_DOWNLOADS]: The skill requires the installation of the @mariozechner/gccli package from the npm registry. This is an external dependency from a third-party author.
[CREDENTIALS_UNSAFE]: The skill manages sensitive Google OAuth credentials, instructing the user to store them in ~/.gccli/credentials.json and ~/.gccli/accounts.json. It facilitates the handling of OAuth client secrets and access tokens.
[INDIRECT_PROMPT_INJECTION]: The skill processes data from external Google Calendar events (e.g., event summaries and descriptions), which acts as an attack surface for indirect prompt injection.
Ingestion points: External calendar data is ingested via the output of commands like gccli <email> events and gccli <email> event as described in SKILL.md.
Boundary markers: No specific delimiters or instructions to ignore embedded content are present in the prompt templates.
Capability inventory: The skill executes shell commands to run the gccli tool and performs filesystem operations to manage configuration.
Sanitization: No sanitization, escaping, or validation of the calendar event content is defined in the instructions.

gccli