cal-candy: a Markdown calendar

• Analyzed: Apr 3, 2026, 2:21 PM
• Findings: 1
• Version: 1.0.1
• Hash: 951f62926400c20262d523a626540987e25b2a42e1ef0aee43ce06506c9a50bc
• Source: palm
• External report: View on VirusTotal

Findings (1)

The cal-candy skill is a legitimate local calendar management tool that stores events in Markdown files and reminders in a JSON file within a dedicated workspace directory (~/.openclaw/workspace/calendar/). The Python script (scripts/mdcal.py) implements standard calendar functionality such as adding, listing, viewing, and deleting events without any high-risk behaviors like network access, shell execution, or sensitive data exfiltration.