Back to skill

Security audit

Feishu calendar sync, local ics to json data for AI agent

Security checks across malware telemetry and agentic risk

Overview

This is a local calendar-file converter that reads selected ICS files and writes JSON, with no evidence of hidden network access, credential use, or destructive behavior.

Install dependencies from trusted sources, run the tool only on a narrow calendar folder you intend to process, and review generated JSON before sharing or importing it because it may contain private calendar information.

SkillSpector

By NVIDIA
Vulnerability Patterns
  • Prompt InjectionInstruction Override, Hidden Instructions, Exfiltration Commands
  • Data ExfiltrationExternal Transmission, Env Variable Harvesting, File System Enumeration
  • Privilege EscalationExcessive Permissions, Sudo/Root Execution, Credential Access
  • Supply ChainUnpinned Dependencies, External Script Fetching, Obfuscated Code
  • Excessive AgencyUnrestricted Tool Access, Autonomous Decision Making, Scope Creep

VirusTotal

64/64 vendors flagged this skill as clean.

View on VirusTotal

Static analysis

No suspicious patterns detected.