Google Calendar
AdvisoryAudited by Static analysis on May 3, 2026.
Overview
No suspicious patterns detected.
Findings (0)
Artifact-based informational review of SKILL.md, metadata, install specs, static scan signals, and capability signals. ClawScan does not execute the skill or run runtime probes.
You will be trusting the external ClawLink plugin in addition to this instruction-only skill.
The skill depends on a separately installed plugin that is not included in the provided artifacts. The install step is disclosed and central to the skill's purpose.
Install the verified ClawLink plugin: `openclaw plugins install clawhub:clawlink-plugin`
Install the plugin only from the expected ClawHub source and review ClawLink/plugin trust information before connecting your account.
After setup, OpenClaw/ClawLink can access the connected Google Calendar according to the permissions you approved.
The skill uses delegated account authorization through ClawLink and persists a local credential, which is expected for calendar integration but sensitive.
Pairing stores a local ClawLink credential in OpenClaw's plugin config so future tool calls can work.
Review the permissions during the Google/ClawLink consent flow and revoke the connection if you no longer want the skill to access your calendar.
Calendar changes could affect your schedule or attendees if approved.
The skill can create, edit, move, or delete calendar events through tools. It mitigates this by requiring preview and user confirmation before writes.
For event changes or other high-impact actions, call `clawlink_preview_tool` first, then confirm with the user.
Carefully review previews before confirming any event creation, edit, move, or deletion.
Your calendar integration relies on ClawLink as a third-party service between OpenClaw and Google Calendar.
Google Calendar access is mediated by an external integration hub, so calendar-related tool calls and authorization flows depend on ClawLink's service boundary.
Powered by ClawLink, an integration hub for OpenClaw that handles hosted connection flows and credentials
Use this only if you trust ClawLink's handling of calendar data and credentials, and consult its documentation/privacy information if needed.