ClawHub
Back to skill

Security audit

Calendly Quick Book

Security checks across malware telemetry and agentic risk

Overview

This is a disclosed Calendly booking helper; its main risk is accidental booking from broad triggers, not hidden or unrelated behavior.

Install only if you want the agent to create real Calendly bookings through your account. Use explicit Calendly-specific commands, confirm attendee details and time before submission, and remove or revoke the Calendly token if you stop using the skill.

SkillSpector

By NVIDIA
Vulnerability Patterns
  • Data ExfiltrationExternal Transmission, Env Variable Harvesting, File System Enumeration
  • Trigger AbuseOverly Broad Trigger, Shadow Command Trigger, Keyword Baiting Trigger
  • Prompt InjectionInstruction Override, Hidden Instructions, Exfiltration Commands
  • Privilege EscalationExcessive Permissions, Sudo/Root Execution, Credential Access
  • Supply ChainUnpinned Dependencies, External Script Fetching, Obfuscated Code
Findings (4)

Vague Triggers

Medium
Confidence
93% confidence
Finding
The README advertises very broad activation phrases such as 'book' and generic requests to book a meeting, without clearly constraining when the skill should trigger or when it should defer. In an agent setting, this can cause unintended activation on ordinary conversation and lead to unauthorized transmission of personal data or unintended meeting creation through Calendly.

Missing User Warnings

Medium
Confidence
95% confidence
Finding
The skill description emphasizes convenience but does not explicitly warn users that names, email addresses, timezone information, and scheduling details will be sent to Calendly and that calendar invites may be created automatically. This weakens informed consent and increases the risk of privacy-impacting actions being taken without the user fully understanding the external data transfer and side effects.

Vague Triggers

Medium
Confidence
93% confidence
Finding
The trigger description is broad enough to activate on generic requests to "book a meeting," which can cause the skill to run when the user did not specifically intend to use Calendly or authorize creating a real booking. In this skill, invocation leads directly to external API calls and calendar actions involving personal data, so accidental activation has meaningful privacy and integrity consequences.

Missing User Warnings

Medium
Confidence
96% confidence
Finding
The skill does not clearly warn users that it will transmit name, email, timezone, and scheduling details to Calendly and create a real meeting on their behalf. Because the skill is user-invocable and designed for immediate booking, the absence of upfront disclosure increases the risk of unintended third-party data sharing and unauthorized real-world actions.

VirusTotal

66/66 vendors flagged this skill as clean.

View on VirusTotal

Static analysis

No suspicious patterns detected.