Back to skill
Skillv1.0.0

VirusTotal security

Cal.com · External malware reputation and Code Insight signals for this exact artifact hash.

Scanner verdict

BenignApr 29, 2026, 4:09 AM
Hash
e7fef5eb4df89fd6cdc07d74b1bfdeab3dd00e8db38847942030b163d10d3d9a
Source
palm
Verdict
benign
Code Insight
Type: OpenClaw Skill Name: calcom Version: 1.0.0 The OpenClaw AgentSkills skill bundle for Cal.com API v2 is classified as benign. The `SKILL.md` and all `references/*.md` files provide standard, comprehensive documentation for interacting with a legitimate scheduling API (Cal.com). There is no evidence of prompt injection attempts against the AI agent, no instructions for data exfiltration, malicious execution, persistence, or unauthorized actions. The documentation even includes security best practices for API key handling and webhook verification, indicating a responsible approach. While the API allows creating webhooks to arbitrary URLs, this is a standard API capability and the skill bundle does not instruct the agent to use it maliciously; a malicious user would need to explicitly prompt the agent to do so.
External report
View on VirusTotal