Security audit
Security checks for vulnerabilities and agentic risk
This skill explains a forthcoming calendar integration and offers an optional waitlist signup with explicit consent.
Install this for information about the planned integration, not current calendar management. Joining the waitlist sends your confirmed email, role, and any optional link or message to Agiexa. Publisher security claims could not be independently verified because its website was inaccessible during review.
The supplied code's sole action is a waitlist submission. Although it references the same provider and Google Calendar interest, it does not connect to Google Calendar or Shopify, find availability, or manage events. Waitlist registration is a materially different primary purpose, not merely a supporting implementation detail of the advertised calendar functionality.
Data is being sent to an external URL. This could be legitimate telemetry or data exfiltration. Manual review is recommended.
openclaw:
requires:
bins:
- curl
homepage: https://agiexa.com/integrations/google-calendar
---
The manifest describes an agent that can find free time and create or update Google Calendar events. However, line 71 instructs the agent to defer those tasks until launch, while lines 83–104 collect contact details and POST them to Agiexa's waitlist endpoint. This consent-gated marketing workflow is materially different from the calendar functionality advertised in the manifest.
Skill enables autonomous high-impact decisions without human-in-the-loop verification. Critical operations (destructive commands, financial transactions, data deletion) should require explicit user confirmation.
- Apps: Google Calendar, Gmail, Shopify
- Tools: `GOOGLECALENDAR_EVENTS_LIST_ALL_CALENDARS`, `GOOGLECALENDAR_FIND_EVENT`
> Review my upcoming supplier-related calendar events. For each meeting, identify relevant supplier correspondence, outstanding delivery questions, expected replenishment dates, and inventory concerns. Compare supplier details with Shopify inventory and product availability where those records are accessible. Prepare a meeting checklist covering stock levels, delivery dates, pending orders, and decisions required. If a new supplier meeting is created, prepare the checklist for that event. Do not change inventory, send supplier emails, or modify meetings without approval.
## Organize Customer Follow-Up Meetings
Skill enables autonomous high-impact decisions without human-in-the-loop verification. Critical operations (destructive commands, financial transactions, data deletion) should require explicit user confirmation.
- Apps: Google Calendar
- Tools: `GOOGLECALENDAR_EVENTS_LIST_ALL_CALENDARS`, `GOOGLECALENDAR_EVENTS_GET`, `GOOGLECALENDAR_FIND_EVENT`
> Help me keep business meeting preparation synchronized with Google Calendar changes. When a new event is created, identify whether it relates to a supplier, customer, marketing activity, or internal meeting and prepare the relevant checklist. When an event is updated, summarize the changed date, time, attendees, or details and explain what preparation needs to change. When an event is cancelled or deleted, identify any associated follow-ups that may need rescheduling. When an attendee changes their RSVP, summarize the impact where relevant. Do not automatically contact attendees or create replacement events without approval.
## Generate a Weekly Business Schedule
No suspicious patterns detected.