automating-calendar
Pass
Audited by Gen Agent Trust Hub on Sep 16, 2026
Risk Level: SAFECOMMAND_EXECUTIONINDIRECT_PROMPT_INJECTION
Full Analysis
- [COMMAND_EXECUTION]: The scripts
scripts/set_up_calendar_automation.pyandscripts/set_up_calendar_automation.shexecuteosascriptto trigger macOS system permission prompts. This is a legitimate step for obtaining TCC (Transparency, Consent, and Control) access to the Calendar application. - [INDIRECT_PROMPT_INJECTION]: The skill processes calendar event data, creating a potential surface for indirect prompt injection.
- Ingestion points:
scripts/calendar_summary.py,scripts/list_upcoming_events.py, andscripts/find_free_slots.pyread event summaries and locations from the user's calendars. - Boundary markers: No delimiters or 'ignore' instructions are used to wrap the ingested content to prevent instructions in event data from being interpreted.
- Capability inventory: The data-processing scripts are restricted to terminal output and do not have access to file-write, network, or dynamic execution capabilities.
- Sanitization: The skill does not sanitize the ingested event fields before printing them.
Audit Metadata