Claude Codepasses structure
Checker 0.1.0 · agent-skills-2026-08-13+claude-code-docs-2026-08-13 · 8/26/2026.claude/skills/cal-comRuntime, accounts, dependencies, permissions, network behavior and task quality remain untested.
Real Skill packageSource verifiedClawHub registry
Cal.com
Cal.com API integration with managed OAuth. Manage event types, bookings, schedules, availability, calendars, conferencing, webhooks, teams, verified resources, and user profile. All write operations require explicit user approval. Webhooks send booking and event data to external URLs — confirm the subscriber URL and triggers with the user before creating. Bookings contain attendee identities and email addresses. Use this skill when users want to manage scheduling, create bookings, configure event types, or check…
Identity and source
Publisher attributionbyungkyuregistry owner unverified by skillvetai
Functional categoryAgent Engineering, Security & Governanceautomatically inferred · 64% rule confidence
Package forminstruction bundle2 recorded files
Canonical sourceClawHub registryclawhub:byungkyu:cal-com
Platform declarations
These states come from the source or distribution context. None of the entries below are SkillVetAI compatibility test results.
OpenClawnative officialProvenance: registry distribution
Independent structural checks
These checks parse the fixed package against dated platform rules. They do not execute the Skill or verify task behavior.
OpenAI Codexpasses structure
Checker 0.1.0 · agent-skills-2026-08-13+codex-docs-2026-08-13 · 8/26/2026.agents/skills/cal-comRuntime, accounts, dependencies, permissions, network behavior and task quality remain untested.
OpenClawpasses structure
Checker 0.1.0 · agent-skills-2026-08-13+openclaw-docs-2026-08-13 · 8/26/2026skills/cal-comRuntime, accounts, dependencies, permissions, network behavior and task quality remain untested.
Installation and inspection
This command is recorded from the source ecosystem and resolves the registry's latest release. The fixed release shown on this page should be inspected before adoption.
clawhub install @byungkyu/cal-comclawhub inspect @byungkyu/cal-com --version 1.1.0Security evidence
SkillVetAI static result: high signalhighInstructions or code access sensitive credential locationsSKILL.md:55 · confidence 85% Open human review queue →
This automated, non-executing scan is bound to this release hash. It is not a safety certification and may contain false positives or false negatives.
- Status
- completed
- Coverage
- full text content
- Files
- 2 / 2 inspected as text
- Checked
- 8/26/2026, 1:23:14 PM
- Scanner
- 0.1.3
- Policy
- 1.0.3
1 automated finding
Keychain on macOS, Credential Manager on Windows, Secret Service on Linux), auto-renewed on expiry. The CLI read1 High/Critical review queue entry
STATIC_SENSITIVE_CREDENTIAL_ACCESSpending
3 inferred permission indicators
- network access — automatically inferred
- filesystem write — automatically inferred
- credential access — automatically inferred
8 dependency and API indicators
- api: api.maton.ai
- api: cal.com
- api: clawhub.ai
- api: cli.maton.ai
- api: community.maton.ai
- api: connect.maton.ai
- api: docs.maton.ai
- api: maton.ai
External clawhub result: clean
This is registry-supplied evidence for the recorded release, not an independent SkillVetAI scan. Check the canonical source for the full report, scanner versions, scope, and current moderation state.
- Evidence checked
- 8/26/2026, 7:14:51 AM
- Release binding
- Matches this record
- vt: clean
- skillspector: clean
- llm: clean
Recorded files
The catalog stores hashes and an inventory summary for change detection. It does not republish the package contents.
Package content hash
sha256:a937bb26a342dc7d5ad147613b3da046234a1db46bcdd0c202a654ae8551ae0bShow up to 2 recorded paths
skill-card.mdSKILL.md
Source changelog
CLI-first rewrite: the maton CLI with OAuth login is the documented path, every example is a maton command, SDK examples added, and the raw HTTP fallback feeds the key on stdin instead of reading it from the environment