cal-com-automation
Pass
Audited by Gen Agent Trust Hub on Jul 18, 2026
Risk Level: SAFEPROMPT_INJECTION
Full Analysis
- [SAFE]: Comprehensive analysis of the skill's instructions, metadata, and external references revealed no evidence of malicious intent, obfuscation, or unauthorized data access. The use of Rube MCP and Composio toolkits is consistent with documented integration patterns for these services.
- [PROMPT_INJECTION]: The skill identifies an indirect prompt injection attack surface as it is designed to ingest and process data from external Cal.com accounts.
- Ingestion points: External data enters the agent context via the
CAL_FETCH_ALL_BOOKINGSandCAL_GET_AVAILABLE_SLOTS_INFOtools (SKILL.md). - Boundary markers: The skill does not define specific delimiters or instructions for the agent to differentiate between system instructions and data retrieved from external bookings.
- Capability inventory: The skill provides capabilities to modify external state, including creating bookings via
CAL_POST_NEW_BOOKING_REQUESTand managing webhooks viaCAL_DELETE_WEBHOOK_BY_ID(SKILL.md). - Sanitization: There is no evidence of input validation or sanitization applied to the content retrieved from the Cal.com API before it is utilized by the agent.
Audit Metadata