The Agent Skills Directory

[EXTERNAL_DOWNLOADS]: The setup.sh script installs required Node.js dependencies from the official npm registry to facilitate the skill's operation.
[INDIRECT_PROMPT_INJECTION]: The skill ingests data from external CalDAV servers, such as event summaries, descriptions, and task details, which could potentially contain embedded instructions.
Ingestion points: External calendar and todo objects are retrieved from remote servers in scripts/caldav.js and scripts/sync.js.
Boundary markers: The skill does not currently use specific delimiters to wrap untrusted text from events or tasks when processed by the agent.
Capability inventory: The skill possesses the ability to maintain a local file cache in the user's home directory and perform network operations to CalDAV endpoints.
Sanitization: Structured data parsing is handled by the ical.js library, which validates the iCalendar format.

caldav-sync