pp-google-calendar

HIGH W007: Insecure credential handling detected in skill instructions.

• Insecure credential handling detected (high risk: 0.90). The skill instructs replaying Playbook.steps with verbatim substitution from Playbook.slots_resolved, and the example slots_resolved explicitly contains a "token" field (""), which can force the agent to emit live tokens/secrets into commands or outputs (exfiltration risk).

MEDIUM W012: Unverifiable external dependency detected (runtime URL that controls agent).

• Potentially malicious external URL detected (high risk: 0.90). The SKILL instructs installing the required CLI at runtime via a remote Go module fetch ("go install github.com/mvanhorn/printing-press-library/library/productivity/google-calendar/cmd/google-calendar-pp-cli@latest"), which downloads and builds remote code that would execute locally and is required for the skill to run.