google-calendar

Pass

Audited by Gen Agent Trust Hub on Apr 17, 2026

Risk Level: SAFE
Full Analysis
  • [COMMAND_EXECUTION]: The skill uses standard shell commands like curl and jq to interact with the Google Calendar API. These commands are constrained to the documented functionality of the service.
  • [EXTERNAL_DOWNLOADS]: The instructions involve making network requests to www.googleapis.com. This is an official domain for a well-known service, and no execution of untrusted remote code was detected.
  • [DATA_EXFILTRATION]: Authentication is handled via the $GOOGLE_CALENDAR_TOKEN environment variable. There are no patterns suggesting the exfiltration of sensitive files or credentials to unauthorized domains.
  • [CREDENTIALS_UNSAFE]: The skill follows security best practices by recommending the use of environment variables for API tokens rather than hardcoding them.
Audit Metadata
Risk Level
SAFE
Analyzed
Apr 17, 2026, 04:44 PM