yandex-calendar
PassAudited by VirusTotal on May 12, 2026.
Overview
Type: OpenClaw Skill Name: yandex-calendar Version: 1.0.0 The skill bundle is designed to manage Yandex Calendar using `vdirsyncer` and `khal` tools. All commands and instructions in `SKILL.md` are directly related to calendar synchronization and management, such as listing, adding, and searching events. There is no evidence of data exfiltration, malicious execution, persistence mechanisms, or prompt injection attempts to subvert the agent's intended behavior beyond the skill's stated purpose. The use of `vdirsyncer` and `khal` for CalDAV operations is aligned with the skill's description.
Findings (0)
Artifact-based informational review of SKILL.md, metadata, install specs, static scan signals, and capability signals. ClawScan does not execute the skill or run runtime probes.
If used as intended, the agent can add events to the configured calendar and sync them to Yandex.
The skill instructs the agent to run local CLI commands that can create and sync calendar events using user-provided fields. This is expected for the purpose, but it is still local command-based mutation of account data.
Выполни: `khal new "ДАТА ВРЕМЯ" "ДЛИТЕЛЬНОСТЬ" "НАЗВАНИЕ" && vdirsyncer sync`
Keep event creation user-directed, confirm ambiguous event details, and avoid unsafe shell interpolation of untrusted text.
The skill's effective permissions depend on whichever Yandex/CalDAV account and calendars are configured locally.
CalDAV synchronization through vdirsyncer/khal normally uses the user's local calendar account configuration. This is purpose-aligned, but the metadata does not declare credentials, config paths, or required binaries.
Управление Яндекс.Календарём через CalDAV (vdirsyncer + khal)
Before installing, verify khal/vdirsyncer are configured only for the calendar account and calendars you want the agent to access.
Private schedule details may become visible to the agent and appear in chat responses.
The skill retrieves calendar entries and places the results into the conversation. Calendar event titles, times, and search results can be sensitive, though this is the intended function.
→ Выполни: `vdirsyncer sync && khal list today` → Покажи результат пользователю
Use the skill only in trusted conversations and avoid exposing highly sensitive calendar entries unless needed.