ClawHub

iCloud CalDav

Security checks across malware telemetry and agentic risk

Overview

The skill appears to be a legitimate iCloud calendar integration, but its delete operation has enough under-scoped destructive authority to warrant Review before installation.

Install only if you are comfortable giving the skill iCloud calendar access. Before using deletion, verify the exact event target yourself and prefer workflows that list or preview the event first; avoid passing raw filenames or paths from untrusted prompts.

SkillSpector

By NVIDIA
Vulnerability Patterns
  • MCP Least PrivilegeUnderdeclared Capability, Wildcard Permission, Missing Permission Declaration
  • Prompt InjectionInstruction Override, Hidden Instructions, Exfiltration Commands
  • Data ExfiltrationExternal Transmission, Env Variable Harvesting, File System Enumeration
  • Privilege EscalationExcessive Permissions, Sudo/Root Execution, Credential Access
  • Supply ChainUnpinned Dependencies, External Script Fetching, Obfuscated Code
Findings (2)

Lp3

Medium
Category
MCP Least Privilege
Confidence
97% confidence
Finding
The skill documentation instructs users to provide sensitive credentials via environment variables and to make outbound network requests to Apple's CalDAV service, but no explicit permissions are declared. This creates a transparency and governance gap: operators may approve or run the skill without realizing it can access secrets and transmit data externally, which is especially relevant because it supports destructive calendar operations.

Missing User Warnings

Medium
Confidence
84% confidence
Finding
The delete path performs a destructive remote action immediately once invoked, with no confirmation, dry-run mode, or explicit warning. In an agent/tooling context, this increases the chance of accidental or prompt-induced calendar event deletion, especially because the skill has direct write access to a user's iCloud data.

VirusTotal

66/66 vendors flagged this skill as clean.

View on VirusTotal