eventkit-calendar
Pass
Audited by Gen Agent Trust Hub on Mar 8, 2026
Risk Level: SAFEPROMPT_INJECTION
Full Analysis
- [PROMPT_INJECTION]: The skill provides patterns for fetching and processing calendar events and reminders that create a surface for indirect prompt injection. Maliciously crafted calendar entries could attempt to influence the agent's behavior.
- Ingestion points: Data is ingested through
eventStore.events(matching:)andeventStore.fetchRemindersas described inSKILL.mdand implemented in theCalendarManagerclass inreferences/eventkit-patterns.md. - Boundary markers: The provided code examples lack delimiters or system instructions designed to prevent the agent from interpreting fetched calendar data as executable instructions.
- Capability inventory: The skill documents extensive capabilities for interacting with the system calendar, including creation, modification, and deletion of events and reminders through the
EKEventStoresave and remove methods. - Sanitization: No logic is provided for sanitizing or validating the content of retrieved events (such as titles or notes) before use.
Audit Metadata