cal-candy: Markdown calendar for AI agent

Manage local markdown-based calendar: add, list, view monthly, check today/upcoming events, set reminders, and delete events efficiently.

Security Scan

The skill is largely consistent with a local markdown calendar, but there are a few unexplained/undeclared items (an overridable data directory via MDCAL_DIR and an undeclared dependency on the 'rich' package) that warrant caution before installing.

Purpose & Capability

Name/description match the code: the script implements add/list/view/remind/delete on Markdown files under a calendar directory. No unrelated cloud credentials, network calls, or unexpected binaries are present. Minor mismatch: SKILL.md states files live under ~/.openclaw/workspace/calendar, but the script honors an environment override (MDCAL_DIR) that is not documented in SKILL.md.

Instruction Scope

SKILL.md instructs the agent to run the included Python CLI (python scripts/mdcal.py ...). The CLI reads and writes only calendar markdown files and reminders.json in the calendar directory. It does not call external endpoints or read arbitrary system-wide config files. However, because the script allows MDCAL_DIR to be set, runtime instructions could be made to read/write a different path than the documented ~/.openclaw/workspace/calendar (this override is not described in SKILL.md).

Install Mechanism

There is no install spec (instruction-only with an included script), which limits disk writes to the provided files. However, the script imports 'rich' (rich.print) and does not declare dependencies; if the runtime environment lacks the 'rich' package the script will fail. The absence of a declared dependency list is a mismatch and could cause runtime errors or push operators to install packages from network sources manually.

Credentials

The skill requests no credentials or config paths. But the code reads MDCAL_DIR from the environment and will use whatever path is provided, allowing callers to point the calendar to arbitrary filesystem locations. That environment override is not documented in SKILL.md and could be used (intentionally or accidentally) to read/write outside the expected workspace. No secrets are requested by the skill itself.

Persistence & Privilege

always is false and the skill does not request permanent platform privileges. The script only creates files inside the calendar directory (by default under the user's home). It does not modify other skills' configs or agent-wide settings.

What to consider before installing

This skill appears to implement a local Markdown calendar and does not make network calls or request credentials, but review the following before installing: (1) The Python script imports the 'rich' package but the skill does not declare dependencies — ensure 'rich' is available in your agent runtime or be prepared to install it from a trusted source. (2) The script honors an environment variable (MDCAL_DIR) to change the calendar directory; the SKILL.md does not document this. Avoid setting MDCAL_DIR to sensitive system paths, and ensure the skill runs with least privilege (a directory it can safely read/write). (3) Because the source is 'unknown' and the owner metadata is minimal, consider inspecting the full script locally (you already have scripts/mdcal.py) or running it in a sandbox before giving it write access to your real files. If you want to proceed, verify or pin the runtime Python packages and keep backups of any important files in ~/.openclaw/workspace/calendar.

Cal-Candy - Markdown Calendar

基于本地 Markdown 文件的日历系统，事件存储在 ~/.openclaw/workspace/calendar/ 目录。

快速开始

所有命令通过 python scripts/mdcal.py <command> 执行：

添加事件

python scripts/mdcal.py add <date> <time> <title> [desc] [-r minutes]

• date: 日期 (YYYY-MM-DD) 或 today/tomorrow
• time: 时间 (HH:MM)
• title: 事件标题
• desc: 可选描述
• -r: 可选提醒（提前分钟数）

示例:

python scripts/mdcal.py add today 14:00 团队会议 :: 讨论项目进度 -r 15
python scripts/mdcal.py add 2026-04-01 10:00 清明节踏青

查看事件

python scripts/mdcal.py list [month] [-a]

• month: 月份 (YYYY-MM 或 MM)，默认当月
• -a: 显示所有事件包括过去的

示例:

python scripts/mdcal.py list          # 当月事件
python scripts/mdcal.py list -a       # 显示所有
python scripts/mdcal.py list 2026-03  # 指定月

日历视图

python scripts/mdcal.py view [year] [month]

以日历格式显示本月或指定月份。

今日事件

python scripts/mdcal.py today

即将到来

python scripts/mdcal.py upcoming [-d days]

默认显示未来7天事件。

设置提醒

python scripts/mdcal.py remind [event_id] [minutes]

查看或设置事件提醒。

删除事件

python scripts/mdcal.py delete <event_id>

事件ID为5位UUID，列出会显示在事件后面。

数据存储

• 日历文件: ~/.openclaw/workspace/calendar/YYYY-MM.md
• 提醒文件: ~/.openclaw/workspace/calendar/reminders.json

事件格式：

- [ ] 2026-03-22 14:00 会议标题 :: 描述 #abc12

常用场景

1. 查看今天有啥安排: python scripts/mdcal.py today
2. 查看本月日程: python scripts/mdcal.py list
3. 添加会议: python scripts/mdcal.py add tomorrow 15:00 会议 :: 讨论Q1目标 -r 10
4. 添加提醒: python scripts/mdcal.py remind <event_id> 15