Back to skill

Security audit

Google Calendar (via gcalcli)

Security checks across malware telemetry and agentic risk

Overview

This skill transparently lets an agent manage Google Calendar through gcalcli, including creating and deleting events, with disclosed guardrails.

Install this only if you are comfortable letting an agent use your authenticated gcalcli profile to read and change your Google Calendar. Pay particular attention to the documented policy that a clearly matched delete or edit request can run without a second confirmation; change that policy to always ask first if you prefer stricter control.

SkillSpector

By NVIDIA
Vulnerability Patterns
  • Excessive AgencyUnrestricted Tool Access, Autonomous Decision Making, Scope Creep
  • Prompt InjectionInstruction Override, Hidden Instructions, Exfiltration Commands
  • Data ExfiltrationExternal Transmission, Env Variable Harvesting, File System Enumeration
  • Privilege EscalationExcessive Permissions, Sudo/Root Execution, Credential Access
  • Supply ChainUnpinned Dependencies, External Script Fetching, Obfuscated Code
Findings (1)

Autonomous Decision Making

Medium
Category
Excessive Agency
Content
### Safety guards in place

The skill does NOT blindly delete. All of these must hold before executing without confirmation:

1. **Explicit user request** — the user must have asked for the action in their message.
2. **Single unambiguous match** — exactly one event matches in a tight, bounded time window.
Confidence
92% confidence
Finding
without confirmation

VirusTotal

65/65 vendors flagged this skill as clean.

View on VirusTotal

Static analysis

No suspicious patterns detected.