google-calendar
Pass
Audited by Gen Agent Trust Hub on Mar 29, 2026
Risk Level: SAFEPROMPT_INJECTIONCOMMAND_EXECUTION
Full Analysis
- [COMMAND_EXECUTION]: The skill executes actions using the 'orth' CLI tool, such as creating, listing, and deleting calendar events. This is the primary intended function of the skill and uses the vendor's own command-line interface.
- [PROMPT_INJECTION]: The skill possesses a surface for indirect prompt injection because it retrieves and processes event summaries and descriptions from Google Calendar. Maliciously crafted calendar events could potentially influence the agent's behavior. 1. Ingestion points: retrieved event data from the '/list-events' and '/find-event' actions. 2. Boundary markers: No specific delimiters or 'ignore' instructions are used when presenting retrieved content to the agent. 3. Capability inventory: The skill has the ability to execute CLI commands and modify calendar data. 4. Sanitization: There is no documented validation or sanitization of the content fetched from external calendar events.
Audit Metadata