calendar-manager
Pass
Audited by Gen Agent Trust Hub on Jun 30, 2026
Risk Level: SAFECOMMAND_EXECUTION
Full Analysis
- [COMMAND_EXECUTION]: Executes AppleScript via osascript in a shell environment to manage calendar events. This allows the agent to read, create, and delete events across aggregated personal and professional calendars.\n- [PROMPT_INJECTION]: The skill uses string interpolation to insert user-provided data into shell commands, creating a potential indirect prompt injection surface. Ingestion points: User-provided strings for event summaries, locations, and search terms. Boundary markers: Absent; templates use standard string interpolation without explicit delimiters. Capability inventory: Shell access to execute osascript with permissions to read and modify calendar events. Sanitization: Absent; the provided templates do not include logic to escape or validate user-provided strings before they are embedded in the script.
Audit Metadata