cal-com-automation
Pass
Audited by Gen Agent Trust Hub on Oct 24, 2026
Risk Level: SAFE
Full Analysis
- [INDIRECT_PROMPT_INJECTION]: The skill processes data from the Cal.com API, such as attendee names and booking metadata, which constitutes a potential surface for indirect prompt injection. This is a functional requirement for scheduling operations.
- Ingestion points: Tools like
CAL_FETCH_ALL_BOOKINGSandCAL_GET_AVAILABLE_SLOTS_INFOingest external data from Cal.com. - Boundary markers: None specified in the skill instructions to separate external data from agent instructions.
- Capability inventory: The skill has the ability to write data (create bookings, modify webhooks, manage teams) through the Cal.com API.
- Sanitization: No specific sanitization methods for external data are described in the instructions.
- [EXTERNAL_DOWNLOADS]: The skill references
https://rube.app/mcpas a required MCP server configuration. This is a legitimate functional reference to the service's API endpoint and is not used for arbitrary code execution.
Audit Metadata