pp-outlook-calendar
Pass
Audited by Gen Agent Trust Hub on Oct 3, 2026
Risk Level: SAFEEXTERNAL_DOWNLOADSCOMMAND_EXECUTIONDATA_EXFILTRATIONINDIRECT_PROMPT_INJECTION
Full Analysis
- [EXTERNAL_DOWNLOADS]: The skill instructs the installation of the
outlook-calendar-pp-clitool using NPM'snpxfrom the author's library (@mvanhorn/printing-press-library) and viago installfrom the author's GitHub repository (github.com/mvanhorn/printing-press-library). - [COMMAND_EXECUTION]: The skill's primary function is to execute the
outlook-calendar-pp-clibinary with various flags to interact with Microsoft 365 calendar data. - [DATA_EXFILTRATION]: The CLI tool includes a
--deliver webhook:<url>flag and a feedback mechanism (OUTLOOK_CALENDAR_FEEDBACK_ENDPOINT) that can transmit calendar data or feedback notes to external network endpoints. - [INDIRECT_PROMPT_INJECTION]: The skill processes external data that could contain malicious instructions.
- Ingestion points: Reads calendar event subjects, bodies, and attendee information through commands like
events list,prep, andrecurring-drift(SKILL.md). - Boundary markers: None identified to separate calendar content from agent instructions during prompt interpolation.
- Capability inventory: The skill can execute shell commands, write to local files, and perform network POST operations via webhooks.
- Sanitization: No evidence of sanitization or filtering of calendar content before it is processed by the agent.
Audit Metadata