OverviewHistoryStatsSecurity
Security
Independent checks from skills.sh's audit partners.
Independent checks from skills.sh's audit partners.
Warn5 providerslatest audit Sep 15, 2026
Independent checks from skills.sh's audit partners.
The 'calendar +agenda' skill is a read-only utility designed to list Google Calendar events using the 'gws' CLI tool. The analysis found no evidence of malicious behavior, unauthorized command execution, or data exfiltration. The skill references a local shared configuration for authentication, following standard security practices. While the skill processes external calendar data which is a theoretical surface for indirect prompt injection, this is inherent to its core functionality and mitigated by its read-only nature.
Detected behaviors
No alerts
1 issue
1 file scanned · No issues
Score: 93/100 · 2 sections analyzed