Trust Assessment
calendar received a trust score of 83/100, placing it in the Mostly Trusted category. This skill has passed most security checks with only minor considerations noted.
SkillShield's automated analysis identified 2 findings: 0 critical, 1 high, 1 medium, and 0 low severity. Key findings include Potential Command Injection via gcalcli arguments, Unpinned `gcalcli` dependency.
The analysis covered 4 layers: Manifest Analysis, Static Code Analysis, Dependency Graph, LLM Behavioral Safety. All layers scored 70 or above, reflecting consistent security practices.
Last analyzed on February 14, 2026 (commit 13146e6a). SkillShield performs automated 4-layer security analysis on AI skills and MCP servers.
Layer Breakdown
Behavioral Risk Signals
Security Findings2
| Severity | Finding | Layer | Location | |
|---|---|---|---|---|
| HIGH | Potential Command Injection via gcalcli arguments The skill wraps the `gcalcli` command-line tool. If the AI agent constructs `gcalcli` commands by directly interpolating user-provided arguments (e.g., event titles, dates, descriptions) without proper sanitization or escaping, a malicious user could inject arbitrary shell commands. The examples provided in `SKILL.md` demonstrate direct shell command execution, highlighting the attack surface. Implement robust input sanitization and escaping for all user-provided arguments before constructing and executing `gcalcli` commands. Consider using a library that safely handles subprocess execution with arguments, rather than directly concatenating strings into a shell command. | LLM | SKILL.md:13 | |
| MEDIUM | Unpinned `gcalcli` dependency The skill's manifest (frontmatter in `SKILL.md`) specifies `gcalcli` as a dependency via `pip` without a specific version. This means that the latest version of `gcalcli` will always be installed. While `gcalcli` is a legitimate project, this practice introduces a supply chain risk where a malicious update to the `gcalcli` package on PyPI could be automatically installed, compromising the agent's environment. Pin the `gcalcli` dependency to a specific, known-good version (e.g., `gcalcli==X.Y.Z`) in the `install` section of the manifest to ensure deterministic and secure installations. Regularly review and update the pinned version. | LLM | SKILL.md:1 |
Scan History
Embed Code
[](https://skillshield.io/report/e3184dc788a073c7)
Powered by SkillShield