📦
content-creator
88Create Brand-Consistent Marketing Content
Marketing teams need content that stays consistent across channels. This skill helps plan, write, analyze, and optimize content for brand voice and SEO.
Writing & Content View
Skills cal-com-automation
📦
cal-com-automation
Content revision r1 Medium Risk ⚙️ External commands🌐 Network access🔑 Env variables
Automate Cal.com Scheduling Workflows
Cal.com scheduling work often requires several tool calls and careful parameter handling. This skill guides Claude, Codex, and Claude Code through Rube MCP workflows for bookings, availability, webhooks, and teams.
Supports: Claude Codex Code(CC)
Install with my Agent
Copy this request to your Agent. It includes the canonical Skill page and manifest.
Agent request
Review the Skillstore skill "cal-com-automation" from https://skillstore.io/skills/sickn33-cal-com-automation.md and its manifest at https://skillstore.io/api/skills/sickn33-cal-com-automation/manifest. Verify the artifact. You may proceed after verification, subject to the environment's own policy.Your Agent should still show its plan and request any confirmation required by the security policy.
Agent-readable resources
Use these links when an AI agent, crawler, or script needs clean context instead of reading the full page.
Test it
Using "cal-com-automation". List my upcoming bookings for next week.
Expected outcome:
A concise booking summary grouped by date, with attendee names, times, event types, and status labels.
Using "cal-com-automation". Find available slots for a product demo next Tuesday.
Expected outcome:
A short list of available times in the requested timezone, plus the event type used for the search.
Using "cal-com-automation". Review my webhooks before I update one.
Expected outcome:
A webhook review showing active status, subscriber URL, triggers, and any settings that need confirmation.
Security Audit
Medium Riskv4 • 7/5/2026 Open versioned report
The static shell and reconnaissance findings are false positives caused by Markdown inline code, tables, and workflow examples. The documented Rube MCP URL is a real low-risk third-party network dependency. Semantic review found operational risks around unconfirmed mutating Cal.com actions and webhook destination changes.
1
Files scanned
204
Lines analyzed
1
Review items
0
False positives ignored
Confirmed security concerns (2)
Medium
Mutating Cal.com Actions Need Confirmation
The skill lists booking creation, webhook update or delete, and team creation workflows without requiring explicit user confirmation. This could cause unintended scheduling or account changes.
The cited workflows include create, update, and delete operations, and the surrounding instructions do not add a confirmation requirement. The risk is operational misuse rather than malicious code.
Medium
Webhook Destination Changes Can Expose Booking Data
The skill supports updating webhook subscriber URLs, triggers, active state, and secrets. Without endpoint verification, booking events could be redirected to an unintended receiver.
The cited webhook workflow and parameters can change where booking notifications are sent. The file does not instruct agents to verify URL ownership or event scope before updates.
Capability review items (1)
These are real local capabilities that may be expected for this skill, so they require review but are not counted as confirmed malicious behavior.
Low
Hardcoded URL
**Get Rube MCP**: Add `https://rube.app/mcp` as an MCP server in your client configuration. No API k
Line 20 instructs users to connect the external Rube MCP endpoint. This is expected for the skill, but it is a real third-party network dependency for Cal.com workflows.
Risk Factors
⚙️ External commands (49)
SKILL.md:15 SKILL.md:16 SKILL.md:20 SKILL.md:23 SKILL.md:24 SKILL.md:35 SKILL.md:36 SKILL.md:39 SKILL.md:40 SKILL.md:41 SKILL.md:44 SKILL.md:45 SKILL.md:46 SKILL.md:47 SKILL.md:48 SKILL.md:49 SKILL.md:50 SKILL.md:51 SKILL.md:55 SKILL.md:65 SKILL.md:66 SKILL.md:69 SKILL.md:70 SKILL.md:71 SKILL.md:72 SKILL.md:73 SKILL.md:87 SKILL.md:88 SKILL.md:89 SKILL.md:90 SKILL.md:93 SKILL.md:94 SKILL.md:95 SKILL.md:96 SKILL.md:97 SKILL.md:102 SKILL.md:110 SKILL.md:111 SKILL.md:112 SKILL.md:113 SKILL.md:116 SKILL.md:117 SKILL.md:118 SKILL.md:130 SKILL.md:142-147 SKILL.md:147-152 SKILL.md:152-156 SKILL.md:156-160 SKILL.md:160-164
🌐 Network access (1)
🔑 Env variables (1)
Audited by: codex View Audit History →
Share & cite this report
Share the versioned assessment report, neutral badge, embed card, and citations. Skillstore reports evidence without deciding whether this Skill is safe.
Copy report link
https://skillstore.io/skills/sickn33-cal-com-automation/audits/4?utm_source=security_passport&utm_medium=share&utm_campaign=versioned_reportMarkdown badge
[](https://skillstore.io/skills/sickn33-cal-com-automation?utm_source=security_passport_badge)HTML badge
<a href="https://skillstore.io/skills/sickn33-cal-com-automation?utm_source=security_passport_badge"><img src="https://skillstore.io/badges/skills/sickn33-cal-com-automation/security.svg" alt="Skillstore security assessment" loading="lazy"></a>Embed card
<iframe src="https://skillstore.io/embed/skills/sickn33-cal-com-automation.html" title="Skillstore Security Assessment" sandbox="allow-popups allow-popups-to-escape-sandbox" loading="lazy" referrerpolicy="no-referrer" width="420" height="180"></iframe>Academic citations (APA · BibTeX · CFF)
APA citation
sickn33. (2026). cal-com-automation security audit report (audit version 4) [Author version unspecified]. Skillstore. https://skillstore.io/skills/sickn33-cal-com-automation/audits/4BibTeX citation
@techreport{sickn33-sickn33-cal-com-automation-2026,
author = {sickn33},
title = {cal-com-automation security audit report (audit version 4)},
institution = {Skillstore},
year = {2026},
number = {4},
url = {https://skillstore.io/skills/sickn33-cal-com-automation/audits/4},
note = {Author version unspecified}
}CITATION.cff
cff-version: 1.2.0
message: "If you use this Skill, cite its author and this versioned security audit report."
title: "cal-com-automation security audit report (audit version 4)"
version: "unspecified"
type: report
authors:
- name: "sickn33"
date-released: "2026-07-05"
url: "https://skillstore.io/skills/sickn33-cal-com-automation/audits/4"
identifiers:
- type: other
value: "skillstore:sickn33-cal-com-automation:audit:4"
description: "Skillstore immutable audit report identifier"
Skillstore Score
Why this score Evidence Confidence: High 55
Architecture
85
Maintainability
85
Content
68
Community
83
Spec Compliance
What You Can Build
Schedule Client Meetings
Find available slots, collect attendee details, and create a Cal.com booking with the correct event type.
Monitor Booking Operations
List upcoming, past, cancelled, or unconfirmed bookings across a selected date range.
Maintain Team Scheduling
Review teams, team event types, organization IDs, and webhook configuration for scheduling workflows.
Try These Prompts
Check My Connection
Check whether Rube MCP is available, search for current Cal.com tools, and confirm my Cal.com connection status.
Find Available Times
Find available slots for this Cal.com event type between these dates. Use my timezone and show the best options.
Create A Booking
Check availability for this event type, ask me to choose a slot, then prepare a booking request for the attendee.
Review Scheduling Infrastructure
Review my Cal.com teams, event types, organization ID, and webhooks. Flag risky webhook settings before changing anything.
Best Practices
- Search Rube tools first so requests use current schemas.
- Check availability before creating any booking request.
- Confirm webhook and team changes with the user before applying them.
Avoid
- Do not create bookings before checking available slots.
- Do not change webhook URLs without verifying the destination.
- Do not assume personal accounts have organization or team permissions.
Frequently Asked Questions
Does this skill require a Cal.com API key?
It uses Rube MCP and a connected Cal.com account. Follow the Rube connection flow when authentication is needed.
Can it create bookings?
Yes. It guides availability checks and then prepares a Cal.com booking request with attendee details.
Can it manage webhooks?
Yes. It can guide listing, reviewing, updating, and deleting webhooks through the Cal.com tools.
Does it support team workflows?
Yes. It covers team lists, team details, team creation, team event types, and organization ID lookup.
What permissions are needed?
Permissions depend on the Cal.com account. Team and organization actions may require admin access.
Why should tools be searched first?
Rube tool schemas can change. Searching first helps the agent use current parameter names and requirements.
Developer Details
Author
sickn33License
MIT
Skillstore revision
r1
Version notice
The author did not declare a version.
Repository
https://github.com/sickn33/antigravity-awesome-skills/tree/main/skills/cal-com-automationRef
6425ec35f4ac137735cff58cd7877843bba23e3b
Maintenance freshness
7/18/2026
Usage
6 downloads · 82 views
File structure
📄 SKILL.md
More from sickn33
View all📦
prompt-engineering-patterns
85Improve LLM Prompts With Proven Patterns
Inconsistent prompts waste time and make AI outputs hard to trust. This skill guides prompt design with reusable patterns, examples, evaluation steps, and optimization workflows.
Productivity View
📦
senior-fullstack
82Build Fullstack Apps with Senior Patterns
Teams need consistent setup, architecture, and review guidance for modern web applications. This skill provides scaffolders, workflow references, and quality prompts for React, Next.js, Node.js, GraphQL, and PostgreSQL projects.
Coding & Development View
📦
senior-architect
81Design Scalable Software Architectures
Architecture decisions are hard to compare across web, mobile, backend, and cloud systems. This skill provides structured guides and local scaffold scripts for reports, dependency review, and trade-off documentation.
Coding & Development View
📦
prompt-engineer
81Optimize AI Prompts With Prompt Engineer
Writing clear prompts is hard when goals are vague or complex. This skill turns rough requests into structured prompts using proven prompt frameworks.
Productivity View
📦
product-manager-toolkit
80Prioritize Product Work With Research Insights
Product teams need faster ways to rank features, synthesize interviews, and document decisions. This skill provides RICE scoring, interview analysis, and PRD templates for structured planning.
Productivity View
Related Skills
View all📦
gws-calendar
82Manage Google Calendar with the gws CLI
by googleworkspace
Calendar administration often requires precise API methods and parameters. This skill guides Claude, Codex, and Claude Code through Google Calendar operations using the gws CLI.
Productivity View
📦
gws-calendar-insert
80Create Google Calendar Events with GWS
by googleworkspace
Manual event entry can be slow and inconsistent. This skill creates structured Google Calendar events from clear scheduling details.
Productivity View
📦
gws-calendar-agenda
80View Your Google Calendar Agenda
by googleworkspace
Upcoming events can be difficult to review across multiple calendars. This skill displays a read-only agenda with date, calendar, and timezone filters.
Productivity View
📦
lark-calendar
38Manage Lark Calendars and Meeting Rooms
by larksuite
Scheduling across calendars, attendees, and meeting rooms requires several coordinated steps. This skill guides Claude, Codex, and Claude Code through Lark calendar workflows.
Productivity View
📦
zapier-workflows
38Run and Document Zapier Workflows
by davila7
Zapier workflows are difficult to recall and coordinate across sessions. This skill documents preferred tools and helps execute approved MCP actions or webhook automations.
Productivity View
📦
apscheduler
78Build Reliable Python Schedules with APScheduler
by bossjones
Background jobs become unreliable when schedules, persistence, and concurrency are configured without clear patterns. This skill provides practical APScheduler guidance for reliable Python scheduling.
Coding & Development View