Skill flagged — suspicious patterns detected

ClawHub Security flagged this skill as suspicious. Review the scan results before using.

Calendar Manager

日历管理技能 - 让 AI 能够读取日程、创建事件、设置提醒。当用户要求查看日程、添加日历事件、提醒 upcoming events 时触发此技能。

MIT-0 · Free to use, modify, and redistribute. No attribution required.
0 · 638 · 11 current installs · 11 all-time installs
MIT-0
Security Scan
VirusTotalVirusTotal
Suspicious
View report →
OpenClawOpenClaw
Benign
medium confidence
Purpose & Capability
The name and description match the instructions: the SKILL.md explains how to read, create, modify, and remind about calendar events using local calendar CLIs and system schedulers. The supported services (Google, Apple, Outlook, Fantastical) align with calendar management.
Instruction Scope
Instructions focus on invoking local calendar CLIs (gcalcli, icalBuddy, 'gog' is referenced) and on summarizing events and setting reminders. They do not instruct the agent to read unrelated system files or exfiltrate data. Notes of caution: (1) the document references OAuth usage and client-secret parameters for gcalcli but the skill declares no required credentials — the user must perform OAuth/config locally; (2) there is an apparent inconsistency/typo: the SKILL.md uses both 'gog' and 'gcal/gcalcli' which could confuse which CLI to run; (3) the guide includes cron/Windows Task scheduling examples, which would create persistence if followed.
Install Mechanism
This is an instruction-only skill with no install spec and no code files. That minimizes risk because nothing is downloaded or written by the skill itself.
Credentials
The skill declares no required environment variables or credentials, which is coherent for an instruction-only skill. However, the references mention OAuth flows and client-id/client-secret usage for gcalcli; if you follow those steps you will grant calendar/account access. The SKILL.md also suggests integration with an email-reading skill (email-reader), which could require email access — that is external to this skill and should be audited separately.
Persistence & Privilege
always:false and default autonomous invocation are appropriate. The skill itself does not request permanent agent presence or modify other skills. However, its instructions include using cron/Windows Task Scheduler to deliver reminders; if the user or agent follows those instructions, that creates persistence on the host outside the skill bundle.
Assessment
This skill is an instruction-only calendar helper and is broadly coherent with its description, but check these before installing or using it: - The skill has no homepage and an unknown source; only proceed if you trust the publisher. - Confirm which CLI the skill expects: the README references gcalcli and icalBuddy but also uses 'gog' (likely a typo). Running the wrong binary could do nothing or run an unexpected program. - The docs mention OAuth and client-id/client-secret usage for Google Calendar. Granting OAuth consent or storing client secrets gives calendar access — review scopes and perform OAuth interactively rather than pasting secrets into unknown apps. - The guide shows how to create cron jobs / scheduled tasks for reminders. If you or an automated agent implement those, they will persist on your system; review any scripts before scheduling them. - The skill suggests integration with an email-reader skill; that could access your mailbox. Audit that other skill's requirements before enabling cooperation. If you need this functionality, prefer to install and configure the official CLIs (gcalcli, icalBuddy, Fantastical/Outlook clients) yourself and verify commands locally. If anything in the docs looks unclear (the 'gog' reference), ask the publisher for clarification before granting access or automating tasks.

Like a lobster shell, security has layers — review code before you run it.

Current versionv1.1.0
Download zip
latestvk978q7rp9crgzzerj9p64zkc9581s1zy

License

MIT-0
Free to use, modify, and redistribute. No attribution required.

SKILL.md

Calendar Manager - 日历管理技能

概述

赋予 AI 日历管理能力:

  • 读取日历事件
  • 创建/修改/删除事件
  • 设置提醒
  • 查找空闲时间

触发场景

  1. 用户要求"查看今天/明天/本周的日程"
  2. 用户要求"添加一个会议/事件"
  3. 用户要求"设置提醒"
  4. 用户询问"今天有什么安排"
  5. 定时提醒用户 upcoming events

支持的日历服务

服务说明
Google Calendar需要 gcal CLI 或 API
Apple Calendar (macOS)使用 icalBuddy
Outlook使用 gog CLI
Fantastical第三方应用

使用方法

Google Calendar (gog CLI)

# 列出今天的事件
gog calendar list today

# 列出明天的事件
gog calendar list tomorrow

# 列出这周的事件
gog calendar list this-week

# 创建事件
gog calendar create "会议名称" --when "2026-02-25 14:00" --duration 60

# 快速添加事件
gog calendar add "Team Meeting" tomorrow 3pm

Apple Calendar (icalBuddy)

# 安装
brew install ical-buddy

# 列出今天的事件
icalBuddy eventsToday

# 列出明天的事件
icalBuddy eventsTomorrow

# 列出指定日期范围
icalBuddy eventsFrom:2026-02-24 to:2026-02-28

工作流

1. 检查可用的日历工具
2. 获取指定时间范围的事件
3. 筛选重要/即将到来的事件
4. 汇总呈现给用户

提醒设置

提醒时间说明
事件前 15 分钟会议/约会
事件前 1 小时重要事项
事件前 1 天当天提醒
事件前 1 周周计划

输出格式

向用户呈现日历时:

  • 日期和时间
  • 事件名称
  • 地点(如果有)
  • 参与人(如果有)
  • 建议的准备事项

与邮件技能配合

可以与 email-reader 配合:

  • 读取邮件中的会议邀请
  • 自动创建日历事件
  • 发送会议提醒邮件

Files

2 total
Select a file
Select a file to preview.

Comments

Loading comments…