Google Calendar (via gogcli)

PassAudited by ClawScan on May 1, 2026.

Overview

The skill is coherent for Google Calendar management, but it uses a third-party CLI that can read all calendars and alter events after confirmation.

This skill appears purpose-aligned, but before using it you should verify the gogcli installation source, confirm it is logged into the correct Google account, and carefully review any create/update/delete/RSVP summary before saying yes.

Findings (3)

Artifact-based informational review of SKILL.md, metadata, install specs, static scan signals, and capability signals. ClawScan does not execute the skill or run runtime probes.

What this means

The agent may read sensitive calendar details across calendars and can create, update, delete, or RSVP to events if the user confirms.

Why it was flagged

The skill can use the configured Google Calendar account broadly across calendars and can mutate events, although the write workflow requires explicit confirmation.

Skill content
MUST query all calendars: `gog calendar events --all ...`; ... `Writes (create/update/delete/RSVP)` ... ask for explicit “yes”
Recommendation

Make sure gogcli is authenticated to the intended Google account, review any requested calendar permissions, and only approve writes after checking the summarized details.

What this means

Installing gogcli gives the local environment a third-party tool that will be used to access Google Calendar.

Why it was flagged

The skill points users to install an external CLI via a Homebrew tap. This is central to the skill's purpose, but users should still verify the package source.

Skill content
"install":[{"id":"brew","kind":"brew","formula":"steipete/tap/gogcli","bins":["gog"]}]
Recommendation

Install gogcli only from a trusted source, review the upstream project if needed, and keep it updated.

What this means

Calendar answers could leave out events if the stored exclusion preference is wrong or outdated.

Why it was flagged

Persistent preferences or memory can affect which calendars are filtered from results, so stale or incorrect memory could omit relevant events.

Skill content
First, check the user’s preferences/memory for an explicit “exclude calendars” list.
Recommendation

Ask the agent to state which calendars were filtered, and update or clear calendar-exclusion preferences if results look incomplete.