Security audit
Security checks for vulnerabilities and agentic risk
This skill is a clear calendar-query helper, but it can read both work and personal calendars through an already-authenticated CLI with broad triggers and limited privacy guardrails.
Review before installing. This skill should only be used where Matt intentionally wants the agent to read these calendars. Prefer adding guardrails requiring explicit user permission before reading the personal calendar, limiting date ranges, and summarizing or redacting sensitive event details by default.
The skill directs use of an already authenticated CLI to access both work and personal calendars, but provides no consent, minimization, or sensitivity handling guidance. This is dangerous because any agent invoking the skill can immediately retrieve sensitive scheduling data, including personal events, without explicit checks on necessity, audience, or least-privilege use.
The description uses very broad triggers like schedules, events, availability, or reminders, which can cause the skill to activate for many ordinary user requests without clearly limiting when sensitive calendar access is appropriate. In the context of an already authenticated calendar tool tied to both work and personal accounts, over-broad activation increases the chance of unnecessary exposure of private data.
No suspicious patterns detected.
