← 返回 Skills 市场

Apple Calendar Manager

Name: Apple Calendar Manager
Author: cryptol0rd

作者 CryptoL0rd · GitHub ↗ · v1.0.0

cross-platform ⚠ suspicious

559

总下载

当前安装

版本数

在 OpenClaw 中安装

/install apple-calendar-manager

功能描述

Manage Apple Calendar events via AppleScript. Create, edit, delete, and search calendar events.

使用说明 (SKILL.md)

Apple Calendar Manager

This skill allows OpenClaw to manage events in Apple Calendar using AppleScript.

Capabilities

Add new events to a specified calendar with smart date parsing (e.g., "today", "tomorrow", "next Monday").
(Future) Edit existing events.
(Future) Delete events.
(Future) Search for events.

Requirements

macOS
Apple Calendar application must be accessible and authorized for automation.
The calendar name must exist in the user's Calendar app.

Usage

Add an Event (Smart Date Parsing)

Use the add_event_smart.sh script to add events with relative dates or explicit dates.

Arguments:

calendar_name: The name of the calendar (e.g., "Рабочий", "Домашний").
event_summary: The title of the event.
event_description: (Optional) Description for the event.
relative_start_date: Relative date for start (e.g., "today", "tomorrow", "day after tomorrow", "понедельник", "next monday") or absolute date (e.g., "2026-02-23").
start_time: Start time (format HH:MM, e.g., "12:00").
relative_end_date: Relative date for end (same as relative_start_date).
end_time: End time (format HH:MM, e.g., "15:00").

Example: skills/apple-calendar-manager/add_event_smart.sh "Рабочий" "Чай с Настей" "Чай с Настей с 12 до 15" "tomorrow" "12:00" "tomorrow" "15:00"

Add an Event (Absolute Date Parsing)

Use the add_event.scpt script directly if you prefer to provide absolute dates in YYYYMMDDHHMMSS format.

Arguments:

calendar_name: The name of the calendar.
event_summary: The title of the event.
event_description: Description for the event.
start_datetime_formatted: Start date and time in YYYYMMDDHHMMSS format.
end_datetime_formatted: End date and time in YYYYMMDDHHMMSS format.

Example: osascript skills/apple-calendar-manager/add_event.scpt "Рабочий" "Тест скилла Календарь" "Тестовое событие" "20260225140000" "20260225150000"

Implementation Details

Uses osascript for direct Apple Calendar application control.
parse_relative_date.sh script handles conversion of relative date strings to absolute date/time formats required by AppleScript.
Requires Apple Calendar.app to be running and accessible.
macOS-only.

安全使用建议

This package mostly looks like a local Apple Calendar helper, but do not install or run it yet. Key issues to check before proceeding: - The SKILL.md and add_event_smart.sh call add_event.scpt, but add_event.scpt is not included — request the missing AppleScript file and inspect it for any unexpected behavior (network calls, file writes, credentials exfiltration) before running. - The scripts invoke 'osascript' (AppleScript runner) but the skill doesn't declare that dependency; ensure your environment is macOS and you understand that osascript will control Calendar.app and will require you to grant automation permissions. - parse_relative_date.sh has logic bugs around weekday handling and Russian weekday support; test thoroughly to avoid creating events at the wrong time. - Because the skill controls a local app, it can create/modify calendar events — only grant automation permission if you trust the inspected AppleScript implementation. - If you obtain the missing add_event.scpt, review its source for any network access or file-system operations. Prefer running in a controlled account/profile and back up important calendar data before use. If the author provides the missing AppleScript and fixes the parsing logic and dependency declarations, the skill appears coherent and low-risk; as-is, missing components and inconsistencies make it suspicious.

功能分析

Type: OpenClaw Skill Name: apple-calendar-manager Version: 1.0.0 The `parse_relative_date.sh` script contains a critical shell injection vulnerability. The `RELATIVE_DATE` argument is directly interpolated into the `date -v"next $RELATIVE_DATE_EN"` command without proper sanitization or quoting, allowing an attacker to inject arbitrary shell commands via command substitution or command separation. This flaw could lead to arbitrary code execution on the host system when the `add_event_smart.sh` skill is invoked with a specially crafted `RELATIVE_DATE` argument.

能力评估

⚠ Purpose & Capability

The skill claims to manage Apple Calendar via AppleScript and includes helper shell scripts, which is coherent. However SKILL.md and add_event_smart.sh call an add_event.scpt AppleScript that is not included in the package — a critical missing piece. The skill also fails to declare that it needs the 'osascript' binary (used to run AppleScript). These omissions make the packaged contents insufficient for the stated purpose.

ℹ Instruction Scope

Instructions limit runtime actions to local AppleScript control of Calendar (osascript) and local date parsing; there are no network calls or attempts to read unrelated system files. However, the scripts assume Calendar GUI automation permission and a specific path (skills/apple-calendar-manager/add_event.scpt). The included parse_relative_date.sh contains logic bugs (weekday matching/translations are inconsistent) that could cause parsing failures or errors when given Russian weekday names.

✓ Install Mechanism

This is instruction-only with two small included shell scripts and no install/download step. No remote URLs or archive extraction are used — low install risk.

ℹ Credentials

No environment variables or external credentials are requested, which is proportionate. The skill will require user-level Calendar automation permission on macOS; that privilege is appropriate for the stated functionality but should be granted intentionally. The SKILL.md does not declare the required 'osascript' dependency.

✓ Persistence & Privilege

always is false and there is no install script that attempts to persistently modify agent or system configuration. The skill does not request elevated or persistent privileges.

如何使用

确保已安装 OpenClaw（本地或 Docker 部署）
在对话框中输入安装命令：/install apple-calendar-manager
安装完成后，直接呼叫该 Skill 的名称或使用 /apple-calendar-manager 触发
根据 Skill 的参数说明提供必要输入，即可获得结构化输出

版本历史

v1.0.0

Initial release: Allows adding events to Apple Calendar using relative dates (today, tomorrow, day after tomorrow, next Monday) and explicit dates via AppleScript.

元数据

Slug apple-calendar-manager

版本 1.0.0

许可证 —

累计安装 0

当前安装数 0

历史版本数 1

常见问题