Trust Assessment
caldav-calendar received a trust score of 72/100, placing it in the Caution category. This skill has some security considerations that users should review before deployment.
SkillShield's automated analysis identified 1 finding: 1 critical, 0 high, 0 medium, and 0 low severity. Key findings include Recommended credential fetching via arbitrary command execution.
The analysis covered 4 layers: Manifest Analysis, Static Code Analysis, Dependency Graph, LLM Behavioral Safety. All layers scored 70 or above, reflecting consistent security practices.
Last analyzed on February 13, 2026 (commit 13146e6a). SkillShield performs automated 4-layer security analysis on AI skills and MCP servers.
Layer Breakdown
Behavioral Risk Signals
Security Findings1
| Severity | Finding | Layer | Location | |
|---|---|---|---|---|
| CRITICAL | Recommended credential fetching via arbitrary command execution The skill's setup instructions recommend configuring `vdirsyncer` to fetch sensitive credentials (like an iCloud password) by executing an arbitrary shell command (`password.fetch = ["command", "cat", "~/.config/vdirsyncer/icloud_password"]`). While `cat` itself is benign, this pattern introduces a significant security risk. If the specified command or its arguments were tampered with (e.g., by replacing the password file with an executable script, or modifying the `vdirsyncer` config to execute a malicious command), it could lead to command injection, exfiltration of credentials, or other sensitive data. This exposes the user's system to potential compromise if the configuration file or the referenced password file is compromised. Avoid recommending the `password.fetch = ["command", ...]` pattern for retrieving credentials. Instead, advise users to use more secure methods like environment variables, dedicated secret management tools, or `vdirsyncer`'s built-in `password` option for direct password entry (though less secure for automation). If `command` must be used, emphasize strict validation and sanitization of the command and its arguments, and ensure the command is executed in a highly restricted environment. For this specific case, `vdirsyncer` supports `password.fetch = ["secretstore", "key"]` or `password = "your_password"` directly in the config (though the latter is not recommended for security). | LLM | SKILL.md:98 |
Scan History
Embed Code
[](https://skillshield.io/report/6ca4fe703527838d)
Powered by SkillShield