Cal Com Automation

• Analyzed: May 12, 2026, 3:32 AM
• Findings: 1
• Version: 0.1.0
• Hash: 7fd3dac41ef4c78dac46910f9cc8be27a8eb17c7909039656c1d75aa0d8f9880
• Source: palm
• External report: View on VirusTotal

Findings (1)

The skill bundle is classified as benign. The `SKILL.md` file describes how to automate Cal.com tasks using various `CAL_` prefixed tools via Rube MCP. While tools like `CAL_UPDATE_WEBHOOK_BY_ID` have the capability to modify webhook URLs, potentially leading to data exfiltration if misused by a malicious user prompt, the skill itself does not contain any instructions or embedded data (e.g., malicious URLs) that would direct the AI agent to perform harmful actions. All instructions are aligned with the stated purpose of Cal.com automation, and there is no evidence of prompt injection attempts within the skill to subvert the agent's behavior or security.