google-calendar-skill — independently scanned and version-tracked by SaferSkills.
SaferSkills independently audited google-calendar-skill (Agent Skill) and scored it 96/100 (green). The audit ran 55 deterministic rules across Security, Supply Chain, Maintenance, Transparency, and Community; it found 0 high-severity and 1 lower-severity findings. The full rule-by-rule trace and per-finding evidence are below. Free, methodology-open.
Findings & checks · 1 flagged
A bulleted imperative like {match} tells the agent to never reveal, disclose, or mention something to the user. Used adversarially it can instruct the agent to hide its tool calls or lie about what it did — stripping the transparency a user relies on to trust the agent.
Every scanned point with the score it earned and what moved between them.
First recorded scan — no prior version to compare against.
The primary manifest — the file an agent reads to learn what this artifact does.
This skill provides comprehensive Google Calendar integration through lightweight CLI scripts. All operations are token-efficient and composable.
Before using this skill, you must set up OAuth authentication:
cd ~/.claude/skills/google-calendar-skill && npm installdocs/google-cloud-setup.mdcredentials.json and save to scripts/auth/credentials.json cd ~/.claude/skills/google-calendar-skill && npm run setupThis will open a browser for Google OAuth and save your token locally.
The Calendar skill supports multiple accounts (e.g., personal and work calendars):
# Add a second account (from skill directory)
npm run setup -- --account work
# Add a third account
npm run setup -- --account personalEach account needs separate OAuth authentication.
# List all configured accounts
node scripts/manage-accounts.js --list
# Set default account (used when --account is not specified)
node scripts/manage-accounts.js --set-default work
# Remove an account
node scripts/manage-accounts.js --remove old-accountAll Calendar operations support the --account parameter:
# List work calendar events
node calendar-events-list.js --account work --limit 10
# Create event on personal calendar (or omit --account to use default)
node calendar-events-create.js --account personal --summary "..." --start "..." --end "..."
# Search work calendar
node calendar-events-list.js --account work --query "team meeting"If --account is not specified, the default account is used.
When first using Calendar operations, read the comprehensive README:
cat ~/.claude/skills/google-calendar-skill/README.mdThis provides detailed usage examples for all operations.
All scripts are in the scripts/ directory and output JSON for easy parsing:
cd ~/.claude/skills/google-calendar-skill/scriptsAll scripts return JSON. Parse the output and present relevant information to the user in a friendly format.
Save intermediate results to files when chaining operations:
# List events and save
node calendar-events-list.js --query "team meeting" > /tmp/events.json
# Get details for first event
EVENT_ID=$(cat /tmp/events.json | jq -r '.events[0].id')
node calendar-events-get.js --id "$EVENT_ID"node calendar-list.js# Upcoming events
node calendar-events-list.js --limit 10
# Search by date range
node calendar-events-list.js \
--timeMin "2025-11-15T00:00:00Z" \
--timeMax "2025-11-30T23:59:59Z"
# Search by keyword
node calendar-events-list.js --query "team meeting"node calendar-events-get.js --id "EVENT_ID"# Timed event
node calendar-events-create.js \
--summary "Team Meeting" \
--start "2025-11-20T14:00:00-08:00" \
--end "2025-11-20T15:00:00-08:00" \
--location "Conference Room A" \
--attendees "[email protected],[email protected]"
# All-day event
node calendar-events-create.js \
--summary "Company Holiday" \
--allDay \
--date "2025-12-25"
# With Google Meet
node calendar-events-create.js \
--summary "Team Sync" \
--start "2025-11-20T14:00:00-08:00" \
--end "2025-11-20T15:00:00-08:00" \
--addMeet# Update title
node calendar-events-update.js --id "EVENT_ID" --summary "New Title"
# Update time
node calendar-events-update.js \
--id "EVENT_ID" \
--start "2025-11-20T15:00:00-08:00" \
--end "2025-11-20T16:00:00-08:00"
# Add attendees (preserves existing)
node calendar-events-update.js --id "EVENT_ID" --addAttendees "[email protected]"node calendar-events-delete.js --id "EVENT_ID"node calendar-events-quick.js --text "Lunch with Sarah tomorrow at 12pm"When users ask about their schedule:
calendar-events-list.js with appropriate time filtersExample:
# User asks: "What's on my calendar today?"
TODAY_START=$(date -u +"%Y-%m-%dT00:00:00Z")
TODAY_END=$(date -u +"%Y-%m-%dT23:59:59Z")
node calendar-events-list.js --timeMin "$TODAY_START" --timeMax "$TODAY_END"For simple event creation, use quick add:
# User says: "Schedule lunch with Bob tomorrow at noon"
node calendar-events-quick.js --text "Lunch with Bob tomorrow at 12pm"For detailed events with specific requirements, use create:
node calendar-events-create.js \
--summary "Lunch with Bob" \
--start "2025-11-16T12:00:00-08:00" \
--end "2025-11-16T13:00:00-08:00" \
--location "Restaurant Name"# Find event
node calendar-events-list.js --query "team meeting" > /tmp/results.json
EVENT_ID=$(cat /tmp/results.json | jq -r '.events[0].id')
# Update it
node calendar-events-update.js --id "$EVENT_ID" --location "New Location"Use for --start and --end with timed events:
2025-11-20T14:00:00-08:00 (2pm Pacific)
2025-11-20T14:00:00-05:00 (2pm Eastern)
2025-11-20T14:00:00Z (2pm UTC)Use for --date with all-day events:
2025-11-20 (YYYY-MM-DD)# Default is America/Los_Angeles
node calendar-events-create.js --summary "..." --start "..." --end "..."
# Custom timezone
node calendar-events-create.js \
--summary "..." \
--start "..." \
--end "..." \
--timezone "America/New_York"If scripts fail:
token.json exists in scripts/auth/npm run setup againCommon error patterns:
{
"success": false,
"error": "Token not found. Run: npm run setup"
}This skill is designed for minimal token usage:
~30 seconds. Free. No account. Every finding cites a rule and a line of evidence.