ClawHub
Back to skill

Security audit

Calendar Guard

Security checks for vulnerabilities and agentic risk

Overview

This skill openly automates Google Calendar recovery blocks, but it can write to the primary calendar on a daily trigger without clear confirmation, limits, or duplicate prevention.

Install only if you want an automation that can create events on your primary Google Calendar. Before enabling a daily schedule, define the target calendar, target time window, confirmation policy, and duplicate-prevention behavior so it cannot repeatedly add unwanted Recovery Block events.

A.I.G

Vulnerability Patterns
  • Skill Instruction HijackingAlters the agent's session goals or safety constraints when the skill loads
  • Agent Memory PoisoningWrites attacker-controlled rules into memory that affect later sessions
  • Remote Payload Retrieval and ExecutionFetches external code whose behavior can change after review
  • Embedded Malicious CodeShips malicious scripts inside the skill and executes them locally
  • Unauthorized Access and Privilege EscalationObtains permissions beyond the task's legitimate needs

SkillSpector

Vulnerability Patterns
  • Excessive AgencyUnrestricted Tool Access, Autonomous Decision Making, Scope Creep
  • Trigger AbuseOverly Broad Trigger, Shadow Command Trigger, Keyword Baiting Trigger
  • Prompt InjectionInstruction Override, Hidden Instructions, Exfiltration Commands
  • Data ExfiltrationExternal Transmission, Env Variable Harvesting, File System Enumeration
  • Privilege EscalationExcessive Permissions, Sudo/Root Execution, Credential Access
Findings (2)

Missing User Warnings

High
Confidence
98% confidence
Finding
The skill description and behavior do not clearly warn that it will automatically create calendar events, even though Step 3 performs write actions against Google Calendar. In a scheduling skill, omission of this warning is especially dangerous because users may reasonably expect analysis-only behavior, yet the SOP performs autonomous modifications that can affect availability, workflows, and downstream scheduling integrations.

Vague Triggers

Medium
Confidence
95% confidence
Finding
The activation condition is broad enough to trigger both on an explicit user request and on a generic daily schedule, while the skill is empowered to modify a live Google Calendar automatically. In this context, unintended invocation can lead directly to unauthorized or surprising calendar changes, including repeated insertion of 'Recovery Block' events that disrupt scheduling and user trust.

Static analysis

No suspicious patterns detected.