easycalendar
Warn
Audited by Socket on Apr 28, 2026
1 alert found:
AnomalyAnomalySKILL.md
LOWAnomalyLOW
SKILL.md
SUSPICIOUS: the skill is internally coherent as a Membrane-powered EasyCalendar integration, and its CLI source appears to be official. However, it routes authentication and API traffic through Membrane rather than directly to EasyCalendar, creating third-party credential and data-flow exposure, and it uses mutable CLI install/run patterns.
Confidence: 85%Severity: 62%
Audit Metadata