Calcom Cli

• Analyzed: May 11, 2026, 6:35 AM
• Findings: 1
• Version: 0.1.0
• Hash: bf92b7a7af3ab72d175578149ef0b7c580a7b23264463f0645109cb05987967d
• Source: palm
• External report: View on VirusTotal

Findings (1)

The SKILL.md file contains instructions for the AI agent to execute high-risk shell commands, including a 'curl | bash' pattern to install Bun and the installation of a third-party CLI tool directly from GitHub using 'npx api2cli install Melvynx/calcom-cli'. While these actions are consistent with the stated goal of setting up the environment, they represent significant security risks (RCE and supply chain vulnerabilities) as they execute unverified remote code.