Habilidades connector-googlecalendar

📦

connector-googlecalendar

Name: connector-googlecalendar
Author: caffeinelabs

v0.2.6 Revisão do conteúdo r1 Risco Médio ⚙️ Comandos externos🌐 Acesso à rede📁 Acesso ao sistema de arquivos

Build Secure Google Calendar Integrations

Google Calendar integrations require careful OAuth, token, and time handling. This skill provides a Motoko recipe for authenticated event access, availability checks, and callback routing.

Suporta: Claude Codex Code(CC)

📊 71 Adequado

Instalar com meu Agente

Copie esta solicitação para o seu Agente. Ela inclui a página canônica do Skill e o manifesto.

Solicitação do agente

Review the Skillstore skill "connector-googlecalendar" from https://skillstore.io/skills/caffeinelabs-connector-googlecalendar.md and its manifest at https://skillstore.io/api/skills/caffeinelabs-connector-googlecalendar/manifest. Verify the artifact. You may proceed after verification, subject to the environment's own policy.

Seu Agente ainda deve apresentar o plano e solicitar qualquer confirmação exigida pela política de segurança.

Recursos legíveis por agentes

Use estes links quando um agente de IA, crawler ou script precisar de contexto limpo em vez de ler a página completa.

Detalhe em Markdown GET /skills/caffeinelabs-connector-googlecalendar.md manifest assinado GET /api/skills/caffeinelabs-connector-googlecalendar/manifest lockfile assinado GET /api/skills/caffeinelabs-connector-googlecalendar/lockfile

Testar

Usando "connector-googlecalendar". Add Google Calendar with event listing and creation to my Caffeine app.

Resultado esperado:

A build plan covering authentication, admin settings, callback routing, event listing, event creation, dependencies, and token refresh.

Usando "connector-googlecalendar". Show free 30-minute slots for the next work week.

Resultado esperado:

An availability workflow using FreeBusy, offset-aware timestamps, and busy-period subtraction before event creation.

Usando "connector-googlecalendar". Combine my existing Gmail and Calendar integrations.

Resultado esperado:

A shared OAuth architecture with one settings page, one callback route, one connection record, and combined scopes.

Auditoria de segurança

Risco Médio

v1 • 23/07/2026 Abrir o relatório versionado

All 322 static findings are false positives caused by Markdown formatting, documented URLs, fixed local references, ellipses, and ordinary identifier text. The skill contains no executable scripts, command substitution, uncontrolled filesystem operations, reconnaissance, or prompt injection. One semantic finding remains: the canonical implementation defaults to a full Calendar scope that exceeds its demonstrated event and availability operations.

Arquivos analisados

1,064

Linhas analisadas

Itens de revisão

Falsos positivos ignorados

Preocupações de segurança confirmadas (1)

Médio

SKILL.md:121-127 SKILL.md:362

Overprivileged Default OAuth Scope

The canonical implementation selects the full Calendar scope, while its demonstrated operations list events, create events, and query availability. This grants broader calendar-management authority than those default capabilities require.

The scope table labels this scope as full read/write access, and the canonical code selects it. The demonstrated implementation only performs event and availability operations.

Fatores de risco

⚙️ Comandos externos (50)

🌐 Acesso à rede (20)

📁 Acesso ao sistema de arquivos (10)

SKILL.md:49 SKILL.md:231 SKILL.md:807 SKILL.md:808 SKILL.md:850 SKILL.md:888 SKILL.md:1033 SKILL.md:1041 SKILL.md:1062 SKILL.md:1063

Auditado por: codex

Compartilhar e citar este relatório

Compartilhe o relatório de avaliação versionado, o badge neutro, o cartão incorporável e as citações. A Skillstore apresenta evidências sem decidir se este Skill é seguro.

Abrir o relatório versionado

Copiar link do relatório

https://skillstore.io/skills/caffeinelabs-connector-googlecalendar/audits/1?utm_source=security_passport&utm_medium=share&utm_campaign=versioned_report

Badge Markdown

[![Skillstore security assessment](https://skillstore.io/badges/skills/caffeinelabs-connector-googlecalendar/security.svg)](https://skillstore.io/skills/caffeinelabs-connector-googlecalendar?utm_source=security_passport_badge)

Badge HTML

<a href="https://skillstore.io/skills/caffeinelabs-connector-googlecalendar?utm_source=security_passport_badge"><img src="https://skillstore.io/badges/skills/caffeinelabs-connector-googlecalendar/security.svg" alt="Skillstore security assessment" loading="lazy"></a>

Cartão incorporável

<iframe src="https://skillstore.io/embed/skills/caffeinelabs-connector-googlecalendar.html" title="Skillstore Security Assessment" sandbox="allow-popups allow-popups-to-escape-sandbox" loading="lazy" referrerpolicy="no-referrer" width="420" height="180"></iframe>

Citações acadêmicas (APA · BibTeX · CFF)

Citação APA

caffeinelabs. (2026). connector-googlecalendar security audit report (audit version 1) [Author version 0.2.6]. Skillstore. https://skillstore.io/skills/caffeinelabs-connector-googlecalendar/audits/1

Citação BibTeX

@techreport{caffeinelabs-caffeinelabs-connector-googlecalendar-2026,
  author = {caffeinelabs},
  title = {connector-googlecalendar security audit report (audit version 1)},
  institution = {Skillstore},
  year = {2026},
  number = {1},
  url = {https://skillstore.io/skills/caffeinelabs-connector-googlecalendar/audits/1},
  note = {Author version 0.2.6}
}

CITATION.cff

cff-version: 1.2.0
message: "If you use this Skill, cite its author and this versioned security audit report."
title: "connector-googlecalendar security audit report (audit version 1)"
version: "0.2.6"
type: report
authors:
  - name: "caffeinelabs"
date-released: "2026-07-23"
url: "https://skillstore.io/skills/caffeinelabs-connector-googlecalendar/audits/1"
identifiers:
  - type: other
    value: "skillstore:caffeinelabs-connector-googlecalendar:audit:1"
    description: "Skillstore immutable audit report identifier"

Pontuação do Skillstore

Por que esta pontuação Confiança das evidências: Médio

Arquitetura

100

Manutenibilidade

Conteúdo

Comunidade

Conformidade com a especificação

O que você pode criar

Add Personal Calendar Features

Create a Caffeine app that connects each user, lists upcoming events, and creates events on the primary calendar.

Build Availability Scheduling

Query busy periods and present accurate free slots using offset-aware time calculations.

Unify Gmail and Calendar Access

Share one Google OAuth flow, credential set, callback route, and token record across both services.

Teste estes prompts

Set Up the Connector

Add Google Calendar to my Caffeine app. Include authentication, admin credential settings, OAuth callback handling, upcoming events, and event creation.

Create an Availability Picker

Build a 30-minute availability picker for seven days. Use FreeBusy, offset-aware RFC 3339 parsing, and the signed-in user's calendar.

Review OAuth Security

Review my Google Calendar OAuth flow. Verify PKCE, state validation, exact callback handling, caller-scoped tokens, one refresh retry, and non-replicated requests.

Combine Google Services

Refactor my Gmail and Calendar connectors into one Google OAuth connection. Share credentials, token state, callback routing, and the required scope union.

Boas práticas

Request the narrowest Google scopes that support the enabled calendar features.
Keep client secrets and user tokens in caller-scoped canister state, never in browser storage.
Register the exact callback URI, validate state, and await actor readiness before completing OAuth.

Evitar

Do not replace the generated clients with raw unauthenticated HTTP requests.
Do not return access tokens, refresh tokens, client secrets, or complete connection records to the frontend.
Do not calculate availability from event lists when the FreeBusy endpoint meets the requirement.

Perguntas frequentes

Can this skill list and create Google Calendar events?

Yes. The canonical recipe lists upcoming events and creates events on the signed-in user's primary calendar.

Does every user need to sign in?

Yes. Calendar connections and tokens are stored separately for each authenticated caller.

Who configures the Google OAuth credentials?

An application administrator enters the Google Web client ID and secret through an admin-only settings page.

Which Google Calendar scope should I request?

Choose the narrowest scope that supports your features. The canonical full Calendar scope should be reduced when calendar-level management is unnecessary.

How does the skill calculate availability?

It queries FreeBusy, parses offset-aware RFC 3339 times, and removes overlapping busy intervals from candidate slots.

Can Gmail and Calendar share one Google connection?

Yes. The skill describes one credential set, scope union, callback route, and caller-scoped token record for both services.

Detalhes do desenvolvedor

Autor

caffeinelabs

Licença

MIT

Versão do autor

v0.2.6

Revisão da Skillstore

Repositório

https://github.com/caffeinelabs/skills/tree/10fb452613c797633b8cb33639fc9a754a138039/skills/connector-googlecalendar

Referência

2b63edbed536d39f4b201f38c065a57144320b37

Atualidade da manutenção

23/07/2026

Uso

0 downloads · 0 visualizações

Estrutura de arquivos

📄 SKILL.md