ClawHub
Back to skill

Security audit

Cal.com Integration

Security checks for vulnerabilities and agentic risk

Overview

This is a straightforward Cal.com integration that can change real bookings and availability, but those capabilities are disclosed and match its stated purpose.

Install only if you are comfortable giving OpenClaw read/write access to your Cal.com bookings and availability. Use the minimum API scopes needed, keep the API key in a secret store, and require a clear preview and confirmation before creating or canceling bookings or replacing availability schedules.

SkillSpector

Vulnerability Patterns
  • Data ExfiltrationExternal Transmission, Env Variable Harvesting, File System Enumeration
  • Prompt InjectionInstruction Override, Hidden Instructions, Exfiltration Commands
  • Privilege EscalationExcessive Permissions, Sudo/Root Execution, Credential Access
  • Supply ChainUnpinned Dependencies, External Script Fetching, Obfuscated Code
  • Excessive AgencyUnrestricted Tool Access, Autonomous Decision Making, Scope Creep
Findings (2)

Missing User Warnings

Medium
Confidence
87% confidence
Finding
The skill documents creation and cancellation of live bookings without prominently warning that these are state-changing operations that can alter real calendar data and trigger attendee notifications. In an agentic setting, this increases the risk of unintended destructive or externally visible actions from ambiguous prompts or mistaken automation.

Missing User Warnings

Medium
Confidence
92% confidence
Finding
The schedule update behavior is dangerous because a full-replace PATCH can overwrite existing availability if the agent submits incomplete data. In practice, this can silently erase working hours or date overrides, causing booking outages or incorrect public availability.

Static analysis

No suspicious patterns detected.