Gws Calendar Agenda

Google Calendar: Show upcoming events across all calendars.

Security Scan

The skill's stated purpose (show Google Calendar events) matches the required gws CLI, but the runtime instructions rely on an external shared SKILL.md for authentication and suggest generating files if it's missing — the skill does not declare how or where Google credentials are provided or stored, which is an incoherence worth reviewing before installing.

Purpose & Capability

Name/description (Google Calendar agenda) align with the declared requirement: the skill is instruction-only and requires the 'gws' CLI to query calendars. Requiring a Google-related CLI is appropriate for this purpose.

Instruction Scope

The SKILL.md explicitly tells the agent to read ../gws-shared/SKILL.md for auth, global flags, and security rules and to run 'gws generate-skills' if that file is missing. That directs the agent to read or create files outside this skill's directory and to run a generator that may write config and trigger authentication flows. The skill does not detail what the shared file contains or what paths/credentials will be accessed or created.

Install Mechanism

No install spec and no code files — lowest-risk distribution. The skill relies on an existing 'gws' binary on PATH; installing that binary is outside this skill.

Credentials

The skill declares no required environment variables or primary credential, yet refers to a shared auth document and a CLI that will require Google credentials (OAuth tokens, service account keys, or local config). The lack of declared env vars/config paths is a transparency gap: users can't see what secrets or files the skill will actually need or access.

Persistence & Privilege

always:false and no explicit autonomous privilege escalation. However, the instruction to run 'gws generate-skills' if the shared SKILL.md is missing implies the agent may create files or config (persisted credentials) on disk. This is not inherently malicious but should be reviewed for where files are written and what scopes are requested.

What to consider before installing

This skill appears to be a thin wrapper around the 'gws' CLI to read Google Calendar events, which is reasonable — but it defers authentication details to a sibling file (../gws-shared/SKILL.md) and suggests running 'gws generate-skills' to create that file. Before installing or invoking the skill: 1) Verify the origin and trustworthiness of the 'gws' binary (how will it be installed?). 2) Inspect ../gws-shared/SKILL.md (or the output of 'gws generate-skills') to see exactly what credentials, files, and filesystem locations are used and what OAuth scopes are requested. 3) Confirm whether credentials are stored locally (and where) or provided via environment variables; if stored, prefer isolated test environments. 4) If you don't want the agent creating files or running auth flows, do not allow it to run the generator and run the CLI manually yourself. If you provide those details, I can re-evaluate and raise confidence.

calendar +agenda

PREREQUISITE: Read ../gws-shared/SKILL.md for auth, global flags, and security rules. If missing, run gws generate-skills to create it.

Show upcoming events across all calendars

Usage

gws calendar +agenda

Flags

Flag	Required	Default	Description
--today	—	—	Show today's events
--tomorrow	—	—	Show tomorrow's events
--week	—	—	Show this week's events
--days	—	—	Number of days ahead to show
--calendar	—	—	Filter to specific calendar name or ID
--timezone	—	—	IANA timezone override (e.g. America/Denver). Defaults to Google account timezone.

Examples

gws calendar +agenda
gws calendar +agenda --today
gws calendar +agenda --week --format table
gws calendar +agenda --days 3 --calendar 'Work'
gws calendar +agenda --today --timezone America/New_York

Tips

• Read-only — never modifies events.
• Queries all calendars by default; use --calendar to filter.
• Uses your Google account timezone by default; override with --timezone.

See Also

• gws-shared — Global flags and auth
• gws-calendar — All manage calendars and events commands