caldav-sync
Pass
Audited by Gen Agent Trust Hub on May 18, 2026
Risk Level: SAFE
Full Analysis
- [SAFE]: The skill implements calendar and task management functionality using standard Node.js libraries (
tsdav,ical.js). It follows best practices for credential management by storing user-supplied server URLs, usernames, and passwords in a dedicated configuration file (~/.config/mail-skills/.env) with restricted file permissions (600). The provided setup script (setup.sh) facilitates a standard installation and configuration process without performing any suspicious actions. All network communication is directed toward user-configured or pre-defined official calendar service providers (such as Google, iCloud, or Nextcloud). No evidence of obfuscation, malicious data exfiltration, or unauthorized command execution was found.
Audit Metadata