Clawhub Dev Calendar
PassAudited by ClawScan on May 1, 2026.
Overview
This skill appears to create development calendars as advertised, with disclosed local script execution and optional sharing or storage of generated calendar files.
Before installing, know that this skill may run a bundled Python script, create or overwrite a specified ICS file, and optionally share or store generated project calendars. Keep outputs in the workspace, review calendar files before importing or sending them, and avoid storing sensitive client details in memory unless intended.
Findings (3)
Artifact-based informational review of SKILL.md, metadata, install specs, static scan signals, and capability signals. ClawScan does not execute the skill or run runtime probes.
The agent may run a local Python script to create calendar files.
The skill explicitly directs local execution of its bundled Python script. This is central to generating ICS files and is disclosed, but it is still local code execution users should notice.
exec "python3 scripts/generate_ics.py project.json dev.ics" pty=true
Run the command only from the skill workspace and review the generated ICS before importing or sharing it.
A generated calendar file could replace another file if the output path is chosen carelessly.
The script writes to a caller-supplied output path. This is expected for export, but an unsuitable path could overwrite an unintended file.
output = sys.argv[2] if len(sys.argv) > 2 else 'dev_calendar.ics' ... with open(output_file, 'w') as f:
Use a simple workspace-relative `.ics` filename and avoid protected or unrelated paths.
Project timelines, client delivery dates, or rates could remain available in workspace or memory after the task.
The workflow allows optional persistence of generated calendar/project information. This is purpose-aligned, but persisted project details may be reused in later contexts.
Share: message file or write to workspace/memory/
Avoid writing sensitive client or business calendar details to memory unless you intend them to persist.