google-calendar
Pass
Audited by Gen Agent Trust Hub on Aug 23, 2026
Risk Level: SAFECOMMAND_EXECUTION
Full Analysis
- [COMMAND_EXECUTION]: The skill executes a bundled binary
gws(Google Workspace CLI) to interact with Google Calendar APIs. It uses subcommands such ascalendar +agenda,calendar +insert, andcalendar events patch. The skill includes clear instructions to resolve the binary's path based on the host platform and architecture to prevent execution of unauthorized system binaries. - [SAFE]: The skill includes
SHA256SUMSfor all bundled executables (scripts/bin/darwin-arm64/gws,scripts/bin/darwin-x64/gws,scripts/bin/win32-x64/gws.exe) to ensure integrity. It explicitly warns against usinggws auth loginor hardcoding credentials, relying instead on the platform's managed OAuth flow. All data access is restricted to the specified calendar scopes.
Audit Metadata