ClawHub
Back to skill

Security audit

Calendar Local

Security checks for vulnerabilities and agentic risk

Overview

This skill is a narrow calendar helper, but it can expose the host Google Calendar through local credentials, including from Telegram chats, without an explicit authorization step.

Install only if the OpenClaw host and every chat channel that can trigger this skill are trusted to see the configured Google Calendar. Consider adding a confirmation or user-authorization check before returning events, especially for Telegram or shared deployments.

A.I.G

Vulnerability Patterns
  • Skill Instruction HijackingAlters the agent's session goals or safety constraints when the skill loads
  • Agent Memory PoisoningWrites attacker-controlled rules into memory that affect later sessions
  • Remote Payload Retrieval and ExecutionFetches external code whose behavior can change after review
  • Embedded Malicious CodeShips malicious scripts inside the skill and executes them locally
  • Unauthorized Access and Privilege EscalationObtains permissions beyond the task's legitimate needs

SkillSpector

Vulnerability Patterns
  • Privilege EscalationExcessive Permissions, Sudo/Root Execution, Credential Access
  • Prompt InjectionInstruction Override, Hidden Instructions, Exfiltration Commands
  • Data ExfiltrationExternal Transmission, Env Variable Harvesting, File System Enumeration
  • Supply ChainUnpinned Dependencies, External Script Fetching, Obfuscated Code
  • Excessive AgencyUnrestricted Tool Access, Autonomous Decision Making, Scope Creep
Findings (2)

Credential Access

High
Category
Privilege Escalation
Confidence
70% confidence
Finding

Code accesses credential files (SSH keys, AWS credentials, etc.). This could indicate credential theft attempts.

Content

Scanner excerpt · SKILL.md (reported line 36)May include surrounding context.

md
If the wrapper fails:
- If output mentions `GOG_KEYRING_PASSWORD is not set`, explain that the OpenClaw service is missing the keyring password in its environment.
- If output mentions keyring unlock/auth errors, explain that the local Google token/keyring is unavailable or locked.
- Only then fall back to setup guidance.

## Output style

Missing User Warnings

Medium
Category
Not specified by scanner
Confidence
92% confidence
Finding

The skill directs the agent to read a local Google Calendar tied to the host account, which is likely to contain sensitive personal or organizational data, but it provides no user-facing warning or consent boundary. In a chat context, especially across channels like Telegram, this increases the risk of silent disclosure of private schedule details to an unauthorized or unintended requester.

Content

No source excerpt is available for this finding.

Static analysis

No suspicious patterns detected.