google-calendar-automation
Warn
Audited by Socket on Jul 31, 2026
1 alert found:
AnomalyAnomalySKILL.md
LOWAnomalyLOW
SKILL.md
SUSPICIOUS: the core calendar capabilities match the stated purpose, and OAuth plus keyring storage are proportionate for a Google Calendar integration. However, provenance is only a personal community repo, and the undocumented token refresh claim via a 'Google cloud function' is inconsistent with standard Google OAuth flows and leaves the credential/data path unclear.
Confidence: 80%Severity: 58%
Audit Metadata