Calendly Automation

ReviewAudited by ClawScan on May 1, 2026.

Overview

The skill is a coherent Calendly automation helper, but it requires Calendly OAuth through Rube MCP and can access or change calendar-related account data.

This appears appropriate for Calendly automation. Before installing, make sure you trust Rube/Composio with the Calendly account you connect, grant the minimum needed permissions, and require clear confirmation before cancellations or organization-level changes.

Findings (3)

Artifact-based informational review of SKILL.md, metadata, install specs, static scan signals, and capability signals. ClawScan does not execute the skill or run runtime probes.

Medium

#ASI03: Identity and Privilege Abuse

What this means

The agent could access Calendly events, invitees, availability, and potentially organization-level information depending on the permissions granted.

Why it was flagged

The skill requires delegated Calendly account access through OAuth and may use organization or group-level privileges.

Skill content

Active Calendly connection via `RUBE_MANAGE_CONNECTIONS` with toolkit `calendly` ... follow the returned auth link to complete Calendly OAuth ... Admin rights may be needed for organization or group scope queries

Recommendation

Authorize only the Calendly account and scopes you intend to use, and avoid granting organization/admin permissions unless needed.

Medium

#ASI02: Tool Misuse and Exploitation

What this means

A mistaken cancellation could remove a scheduled event and notify invitees.

Why it was flagged

The skill can perform an irreversible account mutation, but it explicitly instructs the agent to confirm with the user first.

Skill content

`CALENDLY_CANCEL_EVENT` - Cancel the event [Required] ... Cancellation is IRREVERSIBLE - always confirm with the user before calling

Recommendation

Review event details and affected invitees before approving any cancellation or other account-changing action.

Low

#ASI07: Insecure Inter-Agent Communication

What this means

Calendly event and invitee information may be processed through Rube/Composio as part of normal operation.

Why it was flagged

Calendly tool calls and returned data are routed through an external MCP provider, creating a third-party data boundary the user should understand.

Skill content

Automate Calendly operations ... through Composio's Calendly toolkit ... Add `https://rube.app/mcp` as an MCP server

Recommendation

Review Rube/Composio’s permissions and privacy handling before connecting a Calendly account, especially for organization data.