Gcalcli Calendar 3.0.0

• Analyzed: May 9, 2026, 8:07 AM
• Findings: 1
• Version: 1.0.0
• Hash: 031f18d799d041e188f89e2925ea1692d4ba95b936c954c317cf9f0ffd849438
• Source: palm
• External report: View on VirusTotal

Findings (1)

The skill provides a high-efficiency interface for Google Calendar via gcalcli but intentionally instructs the AI agent to bypass user confirmation for destructive actions (deletion and editing) when the target is deemed 'unambiguous'. It utilizes the gcalcli '--iamaexpert' flag to suppress internal safety prompts (SKILL.md). While this behavior is documented as a UX choice for speed (README.md) and includes logic-based safeguards like post-action verification, the removal of the human-in-the-loop for data deletion significantly increases the risk of unauthorized data loss through prompt injection or agent error.