Security checks across malware telemetry and agentic risk
This skill is a disclosed macOS Calendar assistant, but it can read and change real calendar data and optionally install a daily local cron check.
Install only if you want an OpenClaw agent to access macOS Calendar. Review config.json, especially timezone and output_dir, keep date ranges narrow, use --dry-run before cleanup, and remember that install.sh adds a daily cron job until uninstall.sh removes it.
}}
sem.wait()
'''
p = subprocess.run(["swift", "-"], input=code, capture_output=True, text=True)
if p.returncode != 0:
raise SystemExit(p.stderr or p.stdout)
return p.stdout.strip()# If no candidates, remove exact by title/start as a fallback.
if parse_candidates(cleanup.stdout) == 0:
swift_code = f'''import EventKit\nimport Foundation\nlet store = EKEventStore()\nlet fmt = ISO8601DateFormatter()\nlet sem = DispatchSemaphore(value: 0)\nstore.requestAccess(to: .event) {{ granted, _ in\n guard granted else {{ sem.signal(); return }}\n guard let start = fmt.date(from: "{iso(start)}") else {{ sem.signal(); return }}\n guard let cal = store.calendars(for: .event).first(where: {{$0.title == "{cal}"}}) else {{ sem.signal(); return }}\n let pred = store.predicateForEvents(withStart: start, end: start.addingTimeInterval(60), calendars: [cal])\n let events = store.events(matching: pred).filter {{$0.title == "{title}"}}\n for e in events {{ try? store.remove(e, span: .thisEvent) }}\n sem.signal()\n}}\nsem.wait()\n'''
subprocess.run(["swift", "-"], input=swift_code, capture_output=True, text=True)
print(json.dumps({
"ok": True,66/66 vendors flagged this skill as clean.