google-calendar

Pass

Audited by Gen Agent Trust Hub on Aug 23, 2026

Risk Level: SAFECOMMAND_EXECUTION
Full Analysis
  • [COMMAND_EXECUTION]: The skill executes a bundled binary gws (Google Workspace CLI) to interact with Google Calendar APIs. It uses subcommands such as calendar +agenda, calendar +insert, and calendar events patch. The skill includes clear instructions to resolve the binary's path based on the host platform and architecture to prevent execution of unauthorized system binaries.
  • [SAFE]: The skill includes SHA256SUMS for all bundled executables (scripts/bin/darwin-arm64/gws, scripts/bin/darwin-x64/gws, scripts/bin/win32-x64/gws.exe) to ensure integrity. It explicitly warns against using gws auth login or hardcoding credentials, relying instead on the platform's managed OAuth flow. All data access is restricted to the specified calendar scopes.
Audit Metadata
Risk Level
SAFE
Analyzed
Aug 23, 2026, 07:44 AM
Security Audit — agent-trust-hub — google-calendar