Calctl

PassAudited by VirusTotal on May 12, 2026.

Overview

Type: OpenClaw Skill Name: calctl Version: 1.0.0 The skill bundle describes a tool for managing Apple Calendar events using `icalBuddy` and AppleScript. The `SKILL.md` content is purely descriptive, outlining the tool's functionality, commands, and installation requirements (`brew install ical-buddy`). There are no indicators of prompt injection, data exfiltration, malicious execution, persistence mechanisms, or obfuscation. The instructions are clearly aligned with the stated purpose and do not exhibit any high-risk behaviors.

Findings (0)

Artifact-based informational review of SKILL.md, metadata, install specs, static scan signals, and capability signals. ClawScan does not execute the skill or run runtime probes.

What this means

The agent may be able to view calendar information and create events in calendars that may contain personal, family, or work data.

Why it was flagged

This shows the skill is intended to use local Calendar access for both reading events and writing new events.

Skill content
Manage Apple Calendar from the command line using icalBuddy (fast reads) and AppleScript (writes).
Recommendation

Use it only on calendars you are comfortable exposing to the agent, and review any event-creation request before allowing it.

What this means

If the local CLI setup is missing or comes from an unexpected source, the skill may fail or run a command the user did not intend to trust.

Why it was flagged

The skill depends on external local tooling, while the provided package is instruction-only and does not include an installer or implementation for the documented calctl command.

Skill content
**Requirements:** `brew install ical-buddy`
Recommendation

Install icalBuddy from a trusted source and confirm which `calctl` executable, if any, is on the PATH before using the skill.

What this means

Events could be added to the wrong calendar if the default does not match the user's intent.

Why it was flagged

The add command has a hardcoded default calendar, which could target a personal calendar unless the user or agent specifies another calendar.

Skill content
`-c, --calendar <name>` | Calendar to add event to | Privat
Recommendation

Specify `--calendar` for event creation, especially when using work, shared, or family calendars.