Caldav Calendar 1.0.1
v1.0.0Sync and query CalDAV calendars (iCloud, Google, Fastmail, Nextcloud, etc.) using vdirsyncer + khal. Works on Linux.
⭐ 1· 1.5k·9 current·9 all-time
MIT-0
Download zip
LicenseMIT-0 · Free to use, modify, and redistribute. No attribution required.
Security Scan
OpenClaw
Benign
high confidencePurpose & Capability
Name and description match the runtime instructions and required binaries: the SKILL.md explicitly uses vdirsyncer and khal and the registry metadata lists those binaries. There are no unrelated credentials, binaries, or install steps requested that would be unexpected for a CalDAV sync/query utility.
Instruction Scope
Instructions are scoped to configuring vdirsyncer and khal, syncing, listing, searching, creating, editing, and deleting calendar events. They reference user-config files (~/.config/vdirsyncer/config, ~/.config/khal/config), a password file (~/.config/vdirsyncer/icloud_password), and a cache file (~/.local/share/khal/khal.db). Touching those user files is expected for this functionality, but the SKILL.md does instruct actions that read and delete local files (e.g., cat a password file, rm khal.db) — these are necessary for operation but are sensitive and worth user review.
Install Mechanism
This is an instruction-only skill with no install spec and no code files. That minimizes installer risk; the provided apt install suggestion in metadata is reasonable and points at distro packages rather than arbitrary downloads.
Credentials
The skill declares no required environment variables or primary credential, which is consistent with an instruction-only guide. However the instructions require the user to supply credentials for CalDAV providers (via config files or a local password file). The skill does not request or manage secrets itself — it asks users to store credentials on disk (or configure vdirsyncer to fetch them). Users should note that storing plaintext passwords in files is a local security decision.
Persistence & Privilege
The skill does not request always: true, does not install background services, and does not modify other skills or system-wide agent settings. It is user-invocable only and will operate on local user config/data when invoked.
Assessment
This skill is a usage guide for vdirsyncer + khal and appears coherent with that purpose. Before installing/using it: 1) Ensure you install vdirsyncer and khal from trusted package sources (your distro) rather than random binaries. 2) Review and create the vdirsyncer and khal config files yourself — the SKILL.md shows example contents and file locations. 3) Be cautious about how you store calendar passwords: the examples use a local file (plaintext) and a command-based fetch; prefer secure storage (keyring, OS password store, or provider-specific OAuth/app passwords) where possible. 4) Note the skill may instruct you to remove the khal cache file if data seems stale—this will delete local cached calendar data. 5) Because the skill will access your calendar servers, use least-privilege credentials (app-specific passwords) and verify provider URLs. If you are comfortable managing these local config files and secrets, the skill is consistent with its stated purpose.Like a lobster shell, security has layers — review code before you run it.
latestvk979ed2yf5hha8e1ta6hka80cs80hgwd
License
MIT-0
Free to use, modify, and redistribute. No attribution required.
Runtime requirements
📅 Clawdis
OSLinux
Binsvdirsyncer, khal