calendar-api
Pass
Audited by Gen Agent Trust Hub on Jul 29, 2026
Risk Level: SAFE
Full Analysis
- [COMMAND_EXECUTION]: The script
scripts/getzdday.pyexecutes a shell command to configure terminal encoding. - Evidence:
subprocess.run("chcp 65001", shell=True, capture_output=True)inscripts/getzdday.py. - Context: This command is hardcoded and only runs on Windows systems to ensure the terminal correctly displays UTF-8 characters. It does not process user input and is not vulnerable to injection.
- [EXTERNAL_DOWNLOADS]: The skill fetches calendar data from an external API endpoint.
- Evidence: Network requests to
https://cn.apihz.cn/api/time/getzdday.phpusingurllib.request.urlopen. - Context: This network activity is the core functionality of the skill. It correctly utilizes environment variables (
JKHZ_ID,JKHZ_KEY) to handle API authentication, avoiding hardcoded secrets.
Audit Metadata