安全扫描
OpenClaw
可疑
medium confidence该技能声称支持完整的日历集成（Google/Apple/Outlook），但未提供身份验证、运行时指令，并请求无关二进制文件，其声明的功能和要求不一致。
评估建议
该技能更为模糊而非明显恶意，但存在未解释的缺口。安装或启用前：1) 询问作者如何处理Google/Apple/Outlook的身份验证（OAuth流程、令牌存储位置、所需环境变量）。2) 确认为什么列出curl和jq为必需项，并请求具体的运行时示例或将要运行的命令。3) 确认发布者/所有者（_meta.json ownerId与注册元数据不同）并偏好具有可验证主页或源的技能。4) 如果计划授予其日历访问权限，先在低权限或沙盒环境中测试，并避免在理解身份验证流之前提供永久高权限凭据。如果开发人员无法证明缺失的身份验证/配置细节，视为该技能不安全，无法启用以访问您的日历。...详细分析 ▾
⚠ 用途与能力
The SKILL.md claims support for Google, Apple, and Outlook calendars and features like sync and schedule creation, but the skill requests no credentials, tokens, config paths, or explanation of how it will access those providers. A calendar integrator would normally require OAuth credentials, API keys, or platform-specific connectors; those are missing. Additionally, the metadata lists required binaries (curl, jq) yet the instructions include no concrete commands that would use them.
ℹ 指令范围
The runtime instructions are very high-level and contain only feature descriptions and usage examples; there are no concrete runtime steps, commands, or guidance on where credentials or tokens come from. That makes the skill vague and grants broad unspecified discretion to the agent, but does not itself instruct any risky actions (no file reads, no network endpoints, etc.).
✓ 安装机制
This is an instruction-only skill with no install spec and no code files. That minimizes installation risk (nothing is downloaded or written to disk).
⚠ 凭证需求
No environment variables, config paths, or primary credential are declared despite the need for provider authentication implied by the description. The lack of declared credentials is disproportionate to the claimed functionality. Also, the required binaries (curl, jq) are listed even though the SKILL.md contains no instructions that would use them.
✓ 持久化与权限
The skill is not marked always:true and requests no persistent system changes or access to other skills' configurations. It does not appear to require elevated persistence or privileges.
安全有层次，运行前请审查代码。
运行时依赖
无特殊依赖
版本
latestv1.0.02026/2/18
● 无害
安装命令 点击复制
官方npx clawhub@latest install calendar
镜像加速npx clawhub@latest install calendar --registry https://cn.clawhub-mirror.com
技能文档
日程管理 📅 日程和排程管理。 ## 功能 - 创建事件 - 安排会议 - 设置提醒 - 查看可用时间 - 循环事件 - 日历同步 ## 支持提供商 - Google 日历 - Apple 日历 - Outlook 日历 ## 用法示例 `` "安排明天 2 点的会议" "显示本周的日历" "找到 1 小时会议的空闲时间" ``
数据来源：ClawHub ↗ · 中文优化：龙虾技能库
OpenClaw 技能定制 / 插件定制 / 私有工作流定制
免费技能或插件可能存在安全风险，如需更匹配、更安全的方案，建议联系付费定制