Skill flagged — suspicious patterns detected

ClawHub Security flagged this skill as suspicious. Review the scan results before using.

Apple Calendar Manager

Manage Apple Calendar events via AppleScript. Create, edit, delete, and search calendar events.

MIT-0 · Free to use, modify, and redistribute. No attribution required.
0 · 330 · 0 current installs · 0 all-time installs
MIT-0
Security Scan
VirusTotalVirusTotal
Suspicious
View report →
OpenClawOpenClaw
Suspicious
medium confidence
!
Purpose & Capability
The skill claims to manage Apple Calendar via AppleScript and includes helper shell scripts, which is coherent. However SKILL.md and add_event_smart.sh call an add_event.scpt AppleScript that is not included in the package — a critical missing piece. The skill also fails to declare that it needs the 'osascript' binary (used to run AppleScript). These omissions make the packaged contents insufficient for the stated purpose.
Instruction Scope
Instructions limit runtime actions to local AppleScript control of Calendar (osascript) and local date parsing; there are no network calls or attempts to read unrelated system files. However, the scripts assume Calendar GUI automation permission and a specific path (skills/apple-calendar-manager/add_event.scpt). The included parse_relative_date.sh contains logic bugs (weekday matching/translations are inconsistent) that could cause parsing failures or errors when given Russian weekday names.
Install Mechanism
This is instruction-only with two small included shell scripts and no install/download step. No remote URLs or archive extraction are used — low install risk.
Credentials
No environment variables or external credentials are requested, which is proportionate. The skill will require user-level Calendar automation permission on macOS; that privilege is appropriate for the stated functionality but should be granted intentionally. The SKILL.md does not declare the required 'osascript' dependency.
Persistence & Privilege
always is false and there is no install script that attempts to persistently modify agent or system configuration. The skill does not request elevated or persistent privileges.
What to consider before installing
This package mostly looks like a local Apple Calendar helper, but do not install or run it yet. Key issues to check before proceeding: - The SKILL.md and add_event_smart.sh call add_event.scpt, but add_event.scpt is not included — request the missing AppleScript file and inspect it for any unexpected behavior (network calls, file writes, credentials exfiltration) before running. - The scripts invoke 'osascript' (AppleScript runner) but the skill doesn't declare that dependency; ensure your environment is macOS and you understand that osascript will control Calendar.app and will require you to grant automation permissions. - parse_relative_date.sh has logic bugs around weekday handling and Russian weekday support; test thoroughly to avoid creating events at the wrong time. - Because the skill controls a local app, it can create/modify calendar events — only grant automation permission if you trust the inspected AppleScript implementation. - If you obtain the missing add_event.scpt, review its source for any network access or file-system operations. Prefer running in a controlled account/profile and back up important calendar data before use. If the author provides the missing AppleScript and fixes the parsing logic and dependency declarations, the skill appears coherent and low-risk; as-is, missing components and inconsistencies make it suspicious.

Like a lobster shell, security has layers — review code before you run it.

Current versionv1.0.0
Download zip
latestvk97136ys44fs3t0xch2vr1kmb181ssmk

License

MIT-0
Free to use, modify, and redistribute. No attribution required.

SKILL.md

Apple Calendar Manager

This skill allows OpenClaw to manage events in Apple Calendar using AppleScript.

Capabilities

  • Add new events to a specified calendar with smart date parsing (e.g., "today", "tomorrow", "next Monday").
  • (Future) Edit existing events.
  • (Future) Delete events.
  • (Future) Search for events.

Requirements

  • macOS
  • Apple Calendar application must be accessible and authorized for automation.
  • The calendar name must exist in the user's Calendar app.

Usage

Add an Event (Smart Date Parsing)

Use the add_event_smart.sh script to add events with relative dates or explicit dates.

Arguments:

  1. calendar_name: The name of the calendar (e.g., "Рабочий", "Домашний").
  2. event_summary: The title of the event.
  3. event_description: (Optional) Description for the event.
  4. relative_start_date: Relative date for start (e.g., "today", "tomorrow", "day after tomorrow", "понедельник", "next monday") or absolute date (e.g., "2026-02-23").
  5. start_time: Start time (format HH:MM, e.g., "12:00").
  6. relative_end_date: Relative date for end (same as relative_start_date).
  7. end_time: End time (format HH:MM, e.g., "15:00").

Example: skills/apple-calendar-manager/add_event_smart.sh "Рабочий" "Чай с Настей" "Чай с Настей с 12 до 15" "tomorrow" "12:00" "tomorrow" "15:00"

Add an Event (Absolute Date Parsing)

Use the add_event.scpt script directly if you prefer to provide absolute dates in YYYYMMDDHHMMSS format.

Arguments:

  1. calendar_name: The name of the calendar.
  2. event_summary: The title of the event.
  3. event_description: Description for the event.
  4. start_datetime_formatted: Start date and time in YYYYMMDDHHMMSS format.
  5. end_datetime_formatted: End date and time in YYYYMMDDHHMMSS format.

Example: osascript skills/apple-calendar-manager/add_event.scpt "Рабочий" "Тест скилла Календарь" "Тестовое событие" "20260225140000" "20260225150000"

Implementation Details

  • Uses osascript for direct Apple Calendar application control.
  • parse_relative_date.sh script handles conversion of relative date strings to absolute date/time formats required by AppleScript.
  • Requires Apple Calendar.app to be running and accessible.
  • macOS-only.

Files

3 total
Select a file
Select a file to preview.

Comments

Loading comments…