Security audit

Cn Calendar Manager

Security checks for vulnerabilities and agentic risk

Overview

This skill appears to be a straightforward Chinese calendar-file generator, with some implementation hygiene issues but no evidence of hidden or malicious behavior.

Install only if you are comfortable with it creating .ics files in your home directory and installing an unnecessary unpinned Python package. Avoid generating calendar files from untrusted text until the ICS escaping issue is fixed, because crafted input could alter fields inside the imported calendar event.

A.I.G

Vulnerability Patterns

Insecure DependenciesIntroduces malicious components through unsafe dependency sources
Insecure Skill Coding PracticesFinds exploitable flaws such as hardcoded secrets or command injection
Skill Instruction HijackingAlters the agent's session goals or safety constraints when the skill loads
Agent Memory PoisoningWrites attacker-controlled rules into memory that affect later sessions
Remote Payload Retrieval and ExecutionFetches external code whose behavior can change after review

Findings (2)

T09 · Insecure Skill Coding Practices

Warning

Location: scripts/calendar_manager.py:107
Finding: Unescaped User Input Allows ICS Property Injection
Content: View full analysis
Remediation: View remediation

T08 · Insecure Dependencies

Note

Location: SKILL.md:17
Finding: Unnecessary Unpinned Third-Party Dependency Installation
Content: View full analysis
Remediation: View remediation

SkillSpector

Vulnerability Patterns

MCP Least PrivilegeUnderdeclared Capability, Wildcard Permission, Missing Permission Declaration
Prompt InjectionInstruction Override, Hidden Instructions, Exfiltration Commands
Data ExfiltrationExternal Transmission, Env Variable Harvesting, File System Enumeration
Privilege EscalationExcessive Permissions, Sudo/Root Execution, Credential Access
Supply ChainUnpinned Dependencies, External Script Fetching, Obfuscated Code

Findings (2)

Undeclared Tool Scope

Medium

Category: MCP Least Privilege
Confidence: 90% confidence
Finding: The skill advertises file-writing behavior by generating .ics calendar files, but the manifest does not declare any corresponding tool scope or permissions. This creates a trust and review gap: users and platforms cannot accurately assess what the skill will do, and undeclared file output can be abused for unexpected writes, overwriting files, or dropping crafted content in the local environment.
Content: No source excerpt is available for this finding.

Natural-Language Policy Violations

Medium

Category: Not specified by scanner
Confidence: 92% confidence
Finding: The module docstring names the tool 'cn-calendar-manager' and provides all usage instructions solely in Chinese, indicating a fixed language/locale experience. Under the policy, forcing a specific language without user opt-in is a natural-language policy violation unless the locale constraint is explicitly justified, which is not present here.
Content: No source excerpt is available for this finding.

Static analysis

No suspicious patterns detected.