Google Calendar Create Event

Atomic node skill to create a Google Calendar event using the gog CLI.

Security Scan

The skill is internally consistent: it only instructs the agent to run the gog CLI to create a Google Calendar event and requests the gog binary — nothing else is requested or installed.

Purpose & Capability

The skill's name and description state it will create Google Calendar events using the gog CLI and the SKILL.md requires the gog binary and instructs usage of 'gog ... args'. Requiring the gog binary is appropriate and proportionate to the stated purpose.

Instruction Scope

Instructions are minimal and stay within purpose (execute gog with provided args). They do not read files, env vars, or external endpoints. However, the SKILL.md gives the agent freedom to construct arbitrary CLI arguments and contains no guidance on input validation or escaping, which could lead to unintended CLI argument injection depending on how the agent runtime builds/executes the command.

Install Mechanism

No install spec and no code files — instruction-only skill. This is the lowest-risk install model; nothing is written to disk by the skill itself.

Credentials

The skill declares no environment variables or credentials. Note: the gog CLI itself typically uses local Google auth/config (OAuth tokens or config files). The skill does not request those explicitly, so it will operate with whatever credentials are already present for gog in the agent environment.

Persistence & Privilege

always is false and the skill is user-invocable. It does not request persistent presence or modify other skills/configuration. Autonomous invocation is allowed (platform default) but not a special privilege granted by the skill.

Assessment

This skill is small and coherent, but check two things before installing: (1) Confirm the gog CLI on the agent host is the legitimate tool you expect and that its Google credentials (OAuth tokens/config files) are scoped appropriately — the skill will use whatever gog has access to. (2) Review how your agent runtime constructs and executes the supplied 'args' to avoid CLI injection: prefer structured argument passing (not raw shell concatenation) or add input validation/escaping. If you need tighter control, test in a sandbox account or restrict the agent's permission to call this skill autonomously.

Lean Philosophy (Principles)

• Kaizen (改善): This skill is an atomic node, broken down into its simplest, smallest component to eliminate waste and ensure perfection.
• Standardized Work (Hyojun Sagyo): This node represents the most efficient, standardized path for this specific task before automation.
• Jidoka (自働化): This node includes autonomous defect detection. It relies on the CLI's self-healing loop and will report errors if the creation fails.

This skill allows the agent to create a new event in Google Calendar using the native CLI.

Cognitive Directives

WHEN [A new event needs to be scheduled or created in the calendar] THEN [Execute the gog tool with the args parameter]

Schema Example

{
  "args": "calendar create primary --summary \"New Sync Meeting\" --from \"2026-04-26T10:00:00Z\" --to \"2026-04-26T11:00:00Z\" --json"
}

Expected Output

A JSON object confirming the created event details.