calmly

PassAudited by ClawScan on May 1, 2026.

Overview

The skill is coherent for managing macOS Calendar, but users should notice it installs a third-party CLI that can view and create calendar events after Calendar permission is granted.

This skill appears purpose-aligned, but install it only if you trust the Homebrew package and are comfortable granting Calendar access. Supervise create or batch-create commands because changes may persist and sync to iCloud.

Findings (4)

Artifact-based informational review of SKILL.md, metadata, install specs, static scan signals, and capability signals. ClawScan does not execute the skill or run runtime probes.

What this means

After granting permission, the tool can access calendars such as iCloud, local, or CalDAV calendars for its documented functions.

Why it was flagged

The CLI requires macOS Calendar permission, which can expose and modify user calendar data after approval.

Skill content
First run prompts for Calendar access (System Settings → Privacy → Calendars). One-time only.
Recommendation

Grant Calendar access only if you trust the installed CLI and want agents to manage your calendar; revoke access in macOS Privacy settings if no longer needed.

What this means

A mistaken or over-broad agent command could add incorrect events to personal or work calendars.

Why it was flagged

The documented commands can create calendar events, which is purpose-aligned but mutates user calendar data.

Skill content
calmly addtimed Work "Meeting" 2025-03-15 09:00 10:30
Recommendation

Ask the agent to show proposed calendar changes before creating events, especially for batch or work-calendar updates.

What this means

You are relying on the external Homebrew tap and binary for Calendar operations.

Why it was flagged

The skill installs an external Homebrew package; the provided artifacts do not include the package source code.

Skill content
brew | formula: halbotley/tap/calmly | creates binaries: calmly
Recommendation

Review or trust the Homebrew tap before installing, and keep the package updated through normal package-manager hygiene.

NoteHigh Confidence
ASI08: Cascading Failures
What this means

Incorrect events could appear across synced calendars or devices.

Why it was flagged

Calendar changes may propagate beyond the local machine to cloud-synced calendars and other devices.

Skill content
Events sync to iCloud automatically
Recommendation

Use clear calendar names and verify event details before creating or batching events.