google-calendar
Pass
Audited by Gen Agent Trust Hub on Apr 17, 2026
Risk Level: SAFE
Full Analysis
- [COMMAND_EXECUTION]: The skill uses standard shell commands like
curlandjqto interact with the Google Calendar API. These commands are constrained to the documented functionality of the service. - [EXTERNAL_DOWNLOADS]: The instructions involve making network requests to
www.googleapis.com. This is an official domain for a well-known service, and no execution of untrusted remote code was detected. - [DATA_EXFILTRATION]: Authentication is handled via the
$GOOGLE_CALENDAR_TOKENenvironment variable. There are no patterns suggesting the exfiltration of sensitive files or credentials to unauthorized domains. - [CREDENTIALS_UNSAFE]: The skill follows security best practices by recommending the use of environment variables for API tokens rather than hardcoding them.
Audit Metadata