gcalcli
Pass
Audited by Gen Agent Trust Hub on Jun 24, 2026
Risk Level: SAFEEXTERNAL_DOWNLOADSCOMMAND_EXECUTION
Full Analysis
- [EXTERNAL_DOWNLOADS]: The skill provides installation instructions for the gcalcli utility through official package managers (Homebrew and pip) and references the tool's public GitHub repository.
- [COMMAND_EXECUTION]: The skill defines numerous command templates for interacting with the Google Calendar API via the gcalcli CLI. It correctly identifies and warns against using interactive commands (like edit or delete) that would hang in the agent's non-interactive environment, providing --noprompt and --calendar flags as mitigations.
- [DATA_EXFILTRATION]: The documentation specifies the local file system paths where configuration and OAuth credentials are stored (e.g., ~/Library/Application Support/gcalcli/). This information is provided as setup metadata and does not involve any automated commands to read or transmit this data.
Audit Metadata