skills/obra/muse-skills/calendly/Socket

calendly

Warn

Audited by Socket on Oct 8, 2026

1 alert found:

Security

SecuritySKILL.md

MEDIUM

SecurityMEDIUM

SKILL.md

SUSPICIOUS: the functional scope fits a Calendly read/connector skill, and data flow appears intended for official Calendly services, but the skill relies on an undocumented local `calendly` CLI with unverified provenance and unclear publisher relationship. That trust gap is disproportionate enough to classify the skill as suspicious rather than benign.

Confidence: 87%Severity: 80%

Audit Metadata

Analyzed At

Oct 8, 2026, 11:46 PM

Package URL

pkg:socket/skills-sh/obra%2Fmuse-skills%2Fcalendly%2F@86044eb8c40023010184e7c51e9792787e208f4b076b4e7380bcb376101bcf58