gina
PassAudited by ClawScan on May 1, 2026.
Overview
Gina appears to be a small scheduling-assistant stub with no credential, network, persistence, or destructive behavior; the main thing to notice is its local script execution permission.
This looks safe to install as a small assistant stub, but do not assume it can really read or manage your calendar yet. If you enable exec permission, understand that the framework may run the included shell script, and review future updates before trusting any real calendar integration.
Findings (2)
Artifact-based informational review of SKILL.md, metadata, install specs, static scan signals, and capability signals. ClawScan does not execute the skill or run runtime probes.
Installing the skill may allow the assistant framework to run its included shell script, though the reviewed script only prints static scheduling-assistant messages.
The skill asks for permission to execute a local shell script. The referenced script is simple and purpose-aligned, but users should notice any skill that requests local execution authority.
"permissions": ["exec"], "scripts": ["scripts/assistant-core.sh"]
Grant exec permission only if you are comfortable with this local script being run; re-review the script if the package is updated.
A user could overestimate the skill's real scheduling capabilities and rely on it for calendar information it is not actually retrieving.
The package markets calendar and scheduling assistance, but the executable implementation currently appears to be a placeholder and does not actually integrate with a calendar.
# Placeholder for calendar/schedule integration
echo "No events scheduled for today."Treat this version as a prototype or namespace stub unless future artifacts add clearly scoped calendar integrations.