icloud-calendar
Pass
Audited by Gen Agent Trust Hub on Aug 23, 2026
Risk Level: SAFECOMMAND_EXECUTION
Full Analysis
- [COMMAND_EXECUTION]: The skill operates by executing a local, platform-specific CLI binary (
cola-icloud-calendar) bundled in the skill package. The instructions specify resolving the absolute path of the binary based on the host OS to prevent execution of unauthorized versions from the system PATH. - [SAFE]: A
SHA256SUMSfile is provided to verify the integrity of the included macOS and Windows binaries. - [SAFE]: Credential security is maintained by utilizing a secure local configuration page for Apple account details. The skill explicitly forbids the agent from requesting passwords directly or including them in command line arguments.
- [INDIRECT_PROMPT_INJECTION]: The skill processes data from external iCloud calendar services. It includes a mandatory evidence chain: Ingestion points via the
listandcalendarscommands; Boundary markers through specific instructions to treat all calendar content as untrusted; Sanitization by requiring user confirmation for all write operations; Capability inventory including event creation and modification tools.
Audit Metadata