google-calendar-automation

Warn

Audited by Socket on Jul 31, 2026

1 alert found:

Anomaly
AnomalyLOW
SKILL.md

SUSPICIOUS: the core calendar capabilities match the stated purpose, and OAuth plus keyring storage are proportionate for a Google Calendar integration. However, provenance is only a personal community repo, and the undocumented token refresh claim via a 'Google cloud function' is inconsistent with standard Google OAuth flows and leaves the credential/data path unclear.

Confidence: 80%Severity: 58%
Audit Metadata
Analyzed At
Jul 31, 2026, 04:36 PM
Package URL
pkg:socket/skills-sh/sickn33%2Fagentic-awesome-skills%2Fgoogle-calendar-automation%2F@1bfb953d0cfd3515f93fc102bff9f7fab4b5a538ea7756a91555c8af5edd2780
Security Audit — socket — google-calendar-automation