caldav-sync

Pass

Audited by Gen Agent Trust Hub on May 18, 2026

Risk Level: SAFE
Full Analysis
  • [SAFE]: The skill implements calendar and task management functionality using standard Node.js libraries (tsdav, ical.js). It follows best practices for credential management by storing user-supplied server URLs, usernames, and passwords in a dedicated configuration file (~/.config/mail-skills/.env) with restricted file permissions (600). The provided setup script (setup.sh) facilitates a standard installation and configuration process without performing any suspicious actions. All network communication is directed toward user-configured or pre-defined official calendar service providers (such as Google, iCloud, or Nextcloud). No evidence of obfuscation, malicious data exfiltration, or unauthorized command execution was found.
Audit Metadata
Risk Level
SAFE
Analyzed
May 18, 2026, 01:48 PM
Security Audit — agent-trust-hub — caldav-sync