Skip to content
skillsafebeta
← Report library
Purpose / Other

Gws Calendar Agenda Skill Security Audit

What the author says it does (original text)

Google Calendar: Show upcoming events across all calendars.

Independent security check

Security risks found

Files checked
1
Risks found
2
Could it run dangerous commands?Looks for programs run straight after downloading, remote control of your computer, and hidden commands.No risks found
Could it expose your files or keys?Looks for uploads of files containing passwords or keys, and keys written directly in the code.Risks found: 1
Low risk

The default queries every calendar and may expose unnecessary event details to the agent and command output

Source references: 5
What we found

Without `--calendar`, the command queries all calendars. Events can contain meeting subjects, attendees, locations, and personal plans. Narrowing options exist, but the default example does not use them.

Why this matters

If the user only intended to inspect one work calendar, content from personal or shared calendars may also enter agent-visible output, terminal history, or session records. The source does not show transmission to any additional third party.

This is the Skill’s intended read-only function, but the default command queries every calendar rather than the minimum necessary scope. If the agent’s output, logs, or session are accessible to others, returned schedule data could create unnecessary privacy exposure; the source does not specify which event fields are returned. A user can require `--calendar` or restrict use to the needed calendar.

SKILL.md:23In the instructionsOpen original file
```bashgws calendar +agenda```
Show 4 other places
SKILL.md:34In the instructionsOpen original file
| `--days` | — | — | Number of days ahead to show || `--calendar` | — | — | Filter to specific calendar name or ID || `--timezone` | — | — | IANA timezone override (e.g. America/Denver). Defaults to Google account timezone. |
SKILL.md:50In the instructionsOpen original file
- Read-only — never modifies events.- Queries all calendars by default; use --calendar to filter.- Uses your Google account timezone by default; override with --timezone.
SKILL.md:18In the instructionsOpen original file
Show upcoming events across all calendars
SKILL.md:49In the instructionsOpen original file
- Read-only — never modifies events.- Queries all calendars by default; use --calendar to filter.- Uses your Google account timezone by default; override with --timezone.
Could it delete files or keep running?Looks for broad file deletion, disk overwrites, and programs set to start automatically.Risks found: 1
Medium risk

A missing shared Skill triggers a generator and trust in newly created, unaudited instructions

Source references: 3
What we found

The prerequisite says to run `gws generate-skills` when the shared file is absent. That creates persistent files which the agent would then read for authentication and security instructions; neither the generated content nor generator implementation is supplied.

Why this matters

The generator could add or overwrite files in the Skill area and broaden the instructions the agent follows. The supplied material does not identify exact write targets or verify that generated content remains within the read-only calendar purpose.

What this evidence establishes

The instruction does conditionally require running a generator and then treating the generated shared file as authentication and security guidance, so content outside this audit could influence the agent’s decisions. However, the supplied source does not include the `gws` implementation, so its write location, overwrite behavior, generated content, and required permissions cannot be verified; this line alone does not establish malicious or dangerous writes. Before running it, a user can request the generator implementation and a sample generated file.

This assessment concerns the code and conditions shown, not proof that harm has occurred.
SKILL.md:16In the instructionsOpen original file
> **PREREQUISITE:** Read `../gws-shared/SKILL.md` for auth, global flags, and security rules. If missing, run `gws generate-skills` to create it.
Show 2 other places
SKILL.md:8In the instructionsOpen original file
    category: "productivity"    requires:      bins:        - gws    cliHelp: "gws calendar +agenda --help"---
SKILL.md:55In the instructionsOpen original file
- [gws-shared](../gws-shared/SKILL.md) — Global flags and auth- [gws-calendar](../gws-calendar/SKILL.md) — All manage calendars and events commands
Could it bypass safety checks?Looks for skipped website security checks, excessive file access, or actions that skip your approval.No risks found
Could it mislead the AI or hide text?Checks the skill instructions for requests to ignore you, influence the report, or hide text in invisible characters.No risks found
Could it change links or payment recipients without asking?Looks for forced referral or payment changes combined with instructions to hide the change.No risks found

Inside this skill

5 instruction sections

The Skill's live operation runs `gws calendar +agenda` to read upcoming events from the Google account; date, calendar, and timezone options can narrow the scope.

View source
SKILL.md:18In the instructionsOpen original file
Show upcoming events across all calendars
SKILL.md:22In the instructionsOpen original file
```bashgws calendar +agenda```
SKILL.md:30In the instructionsOpen original file
|------|----------|---------|-------------|| `--today` | — | — | Show today's events || `--tomorrow` | — | — | Show tomorrow's events || `--week` | — | — | Show this week's events || `--days` | — | — | Number of days ahead to show || `--calendar` | — | — | Filter to specific calendar name or ID || `--timezone` | — | — | IANA timezone override (e.g. America/Denver). Defaults to Google account timezone. |

The documentation claims the agenda command is read-only and never modifies events; the supplied source contains no command implementation, so that claim cannot be verified at implementation level.

View source
SKILL.md:49In the instructionsOpen original file
- Read-only — never modifies events.- Queries all calendars by default; use --calendar to filter.

This Skill delegates authentication, global flags, and security rules to a neighboring shared Skill, which is not included in the supplied material.

View source
SKILL.md:16In the instructionsOpen original file
> **PREREQUISITE:** Read `../gws-shared/SKILL.md` for auth, global flags, and security rules. If missing, run `gws generate-skills` to create it.
SKILL.md:55In the instructionsOpen original file
- [gws-shared](../gws-shared/SKILL.md) — Global flags and auth- [gws-calendar](../gws-calendar/SKILL.md) — All manage calendars and events commands
Start here · InstructionsSKILL.md
gws-calendar-agenda
Lines connect the instruction file to its sections, not an observed execution order. Select a section to read the source.
Files and check records1 files

Coverage and gaps

Content covered in each file

These are the source ranges included in this check, not a guarantee that every issue has been resolved.

  • SKILL.mdFull text included

This report is for the version above. We read the available code and instructions without running the skill or checking extra packages it installs. This is not a promise of safety: a different version or setup may behave differently.

  • SKILL.mdInstructions

Operations mentioned in code and instructions

Run commands
SKILL.md:22In the instructionsOpen original file
```bashgws calendar +agenda
SKILL.md:39In the instructionsOpen original file
```bashgws calendar +agenda
Lines read
57
File checksum (to compare versions)
160a8333f746d0139983e584bce6f23986b0ca94895671650fdc9605108d3738