Apple Calendar CLI

ReviewAudited by ClawScan on May 10, 2026.

Overview

This is a coherent Apple Calendar helper, but it requires trusting an external npm CLI and can read, create, update, and delete calendar events.

Before installing, make sure you trust the external @joargp/accli npm package and are comfortable granting it Apple Calendar access. When using it, require explicit confirmation before creating, updating, or deleting events, and prefer specific calendar IDs to avoid changing the wrong calendar.

Findings (3)

Artifact-based informational review of SKILL.md, metadata, install specs, static scan signals, and capability signals. ClawScan does not execute the skill or run runtime probes.

What this means

A mistaken command could create the wrong meeting, edit an existing event, or permanently delete a calendar entry.

Why it was flagged

The skill exposes calendar mutation and deletion operations. This is aligned with the stated calendar-management purpose and includes delete confirmation guidance, but accidental or premature execution could change user data.

Skill content
Use it for listing calendars, viewing events, creating/updating/deleting calendar events... Permanently deletes an event. Confirm with user before executing.
Recommendation

Confirm the exact calendar, event, title, time, attendees/location/description, and intended action before any create, update, or delete command.

What this means

The agent may see calendar names, event titles, locations, descriptions, and availability, and may modify events if instructed.

Why it was flagged

The tool acts with the user's local Calendar access. Calendar data can include private or work information, and operations may affect synced accounts.

Skill content
The accli tool provides command-line access to macOS Apple Calendar. It enables listing calendars, querying events, creating/updating/deleting events, and checking availability across calendars.
Recommendation

Grant Calendar access only if you trust this workflow, prefer explicit calendar IDs, and review macOS privacy prompts and agent responses carefully.

What this means

Installing the package means trusting code outside the submitted skill artifacts, and that code may receive Calendar access on macOS.

Why it was flagged

The skill depends on a globally installed external npm package. The supplied artifact set contains only SKILL.md, so the package code and provenance were not reviewed here.

Skill content
npm install -g @joargp/accli
Recommendation

Review the npm package/source and publisher before installing, consider pinning a known version, and install only from a trusted source.