← 返回 Skills 市场
rickhuang28

iCloud Calendar — Full CRUD

作者 RickHuang28 · GitHub ↗ · v2.0.1 · MIT-0
cross-platform ⚠ suspicious
142
总下载
0
收藏
0
当前安装
6
版本数
在 OpenClaw 中安装
/install icloud-cal
功能描述
Manage your iCloud calendars via natural language to create, query, update, and delete events synced to your iPhone calendar using CalDAV.
使用说明 (SKILL.md)

📅 iCloud Calendar — Full CRUD via Natural Language

Version 2.0.0 | Manage your iCloud calendar through natural language via CalDAV.

⚠️ 首次使用请先完成配置 → 见 CONFIG.md

你需要：iCloud 邮箱 + App-Specific 密码 + Python 3.8+ + pip install caldav

配置清单

使用前确认以下 3 项已完成：

  1. ✅ pip install "caldav>=1.3.0,\x3C2.0"
  2. ✅ ICLOUD_EMAIL 环境变量 = 你的 iCloud 邮箱
  3. ✅ ICLOUD_APP_PASSWORD 环境变量 = Apple 专用密码 (xxxx-xxxx-xxxx-xxxx)

如果脚本返回 "Missing ICLOUD_EMAIL or ICLOUD_APP_PASSWORD environment variables"，说明环境变量未正确注入。

解析规则

从自然语言中提取字段，未提及的按推断规则补全。

1. 标题 (summary)

从消息中提取事件核心，去掉时间词和口癖：

  • "下周三下午3点和张总开会" → "和张总开会"
  • "明天记得交报告" → "交报告"
  • "周五晚上聚餐" → "聚餐"

2. 开始时间 (start)

必填。相对日期→绝对日期计算（Asia/Shanghai）：

  • 今天/明天/后天/大后天 → 对应日期
  • 下周一~下周日 → 下周对应星期几
  • 时间："下午3点"→15:00 "上午九点半"→09:30 "晚上8点"→20:00
  • 无具体时间 → 默认 09:00

3. 结束时间 (end)

永远不问用户，按事件类型推断时长：

  • 会议/汇报/评审/面试 → 1小时
  • 聚餐/饭局/火锅/吃饭 → 2小时
  • 运动/健身/游泳/打球 → 1.5小时
  • 电影 → 2.5小时
  • 培训/课程/讲座 → 2小时
  • 飞机/高铁/火车 → 3小时
  • 全天 → 00:00~23:59
  • 兜底 → 1小时
  • 用户说了结束时间 → 用用户的

4. 日历选择 (calendar)

按事件性质自动选：

  • 含"开会/汇报/评审/客户/项目/出差/面试"关键词 → 工作日历
  • 其他 → 个人日历

5. 地点 (location)

提及则提取："在301会议室"→"301会议室" "去北京出差"→"北京" 未提及 → 空

6. 提醒 (alarm)

  • 用户说"提醒我" → 开始前15分钟
  • 指定时间"提前10分钟" → 用指定时间
  • 未提及 → 默认 15 分钟

7. 备注 (description)

收集额外信息：参与者、特殊要求等。"和张总一起" → 备注写"参与者：张总"

执行（创建事件）

export ICLOUD_EMAIL="[email protected]"
export ICLOUD_APP_PASSWORD="xxxx-xxxx-xxxx-xxxx"
python scripts/add-event.py \
    --summary "标题" \
    --start "2026-04-08T15:00:00" \
    --end "2026-04-08T16:00:00" \
    --timezone "Asia/Shanghai" \
    --location "" \
    --calendar "个人" \
    --description "" \
    --alarm-minutes 15

可选参数：

  • --is-all-day：纯日期事件，生成 DTSTART;VALUE=DATE 格式，跨时区不漂移
  • --rrule "FREQ=WEEKLY;BYDAY=MO"：重复事件

回复示例

📅 已记录：和张总开会
🕐 4月8日 周三 15:00-16:00（工作日历）
📍 301会议室
⏰ 提前15分钟提醒

查询（反向查日历）

用户问"我明天有什么安排""这周日程""4月8号有什么"时：

python scripts/add-event.py --query "today|tomorrow|week|nextweek|YYYY-MM-DD|YYYY-MM-DD~YYYY-MM-DD"

query 值：

  • today / tomorrow / week / nextweek
  • 单日：2026-04-08
  • 范围：2026-04-01~2026-04-30

回复示例

📅 明天（4月2日）有 3 个安排：
1. 10:00-11:00 日历功能测试（个人）
2. 14:00-15:00 项目评审（工作）
3. 全天 ios退款请加扣扣群...（工作）

搜索（按关键词）

用户说"我下周有和张总的安排吗""查一下开会的日程"时：

python scripts/add-event.py \
    --search "关键词" \
    --search-range "2026-04-01~2026-04-30"
  • --search：必填，模糊匹配 title/location/description
  • --search-range：可选日期范围，不传默认搜索 ±180 天
  • 返回 {"events": [...], "count": N, "keyword": "关键词", "errors": [...]}

修改事件

用户说"改到4点""换到工作日历""地点改成301"时：

python scripts/add-event.py \
    --update-find "关键词" \
    [--update-set-summary "新标题"] \
    [--update-set-start "2026-04-08T16:00:00"] \
    [--update-set-end "2026-04-08T17:00:00"] \
    [--update-set-location "新地点"] \
    [--update-set-calendar "工作"] \
    [--update-start "2026-04-01"] \
    [--update-end "2026-04-30"]
  • 匹配到多个事件时会报错并列出所有匹配项
  • 返回 {"updated": true, "changes": {...}}

删除（按关键词）

用户说"删掉xxx相关的""删除垃圾事件"时：

export CONFIRM_DELETE=1
# 可选：预览不执行
export DELETE_DRY_RUN=1
python scripts/add-event.py \
    --delete "关键词" \
    --delete-start "2026-01-01" \
    --delete-end "2026-12-31"
  • --delete：必填，关键词模糊匹配
  • --delete-start / --delete-end：可选搜索范围
  • 需要 CONFIRM_DELETE=1 环境变量确认
  • 可设 DELETE_DRY_RUN=1 预览（不真正删除）
  • 返回三态 status: "success"/"partial_success"/"error" + dry_run: true/false

重复事件（RRULE）

python scripts/add-event.py \
    --summary "每周例会" \
    --start "2026-04-07T09:00:00" \
    --rrule "FREQ=WEEKLY;BYDAY=MO"

常用模式：

频率 RRULE
每天 FREQ=DAILY
每周一三五 FREQ=WEEKLY;BYDAY=MO,WE,FR
每两周周五 FREQ=WEEKLY;INTERVAL=2;BYDAY=FR
每月1号 FREQ=MONTHLY;BYMONTHDAY=1
限次10次 FREQ=WEEKLY;BYDAY=MO;COUNT=10
限日期 FREQ=WEEKLY;BYDAY=MO;UNTIL=20260630T000000Z

RRULE 经过白名单校验，仅允许安全字符，拒绝 CRLF 注入。

安全特性

特性 说明
凭据零泄露 仅环境变量传递，异常消息脱敏，进程列表不可见
操作确认门 CONFIRM_DELETE=1 / CONFIRM_UPDATE=1 防误操作
Dry Run DELETE_DRY_RUN=1 预览删除不执行
日志轮转 最多 512KB × 5 备份，自动清理
内容截断 日志中摘要截断至 30 字符
重试保护 Dual-Client 架构，4xx 错误立即放弃不盲目重试
幂等创建 UID 唯一，弱网重试不发重复事件
协议安全 iCal 字段全转义，RRULE 白名单校验

时区支持

默认 Asia/Shanghai，支持任意 IANA 时区名。VTIMEZONE 组件根据 ZoneInfo 自动计算，覆盖 DST 夏令时。

变更记录

完整变更记录见 CHANGELOG.md（v1.4.0 → v2.0.0，36 项改进）。

v2.0.0 亮点

  • ⚡ Dual-Client 架构（10s/60s 超时分离）
  • 🔒 异常消息全面脱敏
  • 🛡️ 删除/更新双确认门 + dry-run
  • 🧹 日志全覆盖 sanitize

故障排查

错误 原因 解决
Missing ICLOUD_EMAIL... 环境变量未设置 检查 openclaw.json 并重启
Authentication failed App Password 错误 重新生成专用密码
Connection failed iCloud 不可达 检查网络/防火墙
Delete requires CONFIRM_DELETE 未设确认标志 export CONFIRM_DELETE=1

完整配置指南 → CONFIG.md

安全使用建议
This skill appears to implement the iCloud CalDAV features it claims, but the package metadata is inconsistent: the registry manifest says no required binaries or env vars while the SKILL.md, CONFIG.md, and the script require Python and two secrets (ICLOUD_EMAIL, ICLOUD_APP_PASSWORD). Before installing: 1) Verify you trust the author/source (no homepage is provided). 2) Confirm where you will store the app-specific password — the docs suggest openclaw.json (set file perms to 600) but consider setting env vars at runtime or using a secrets manager. 3) Inspect and (optionally) run the included test suite locally to review behavior. 4) Be aware the skill will write logs under its logs/ directory; ensure that location is acceptable. 5) Ask the publisher to correct the registry metadata to declare required binaries and env vars (this mismatch is the primary red flag). If you cannot validate the author/source or if you do not want to store an App-Specific Password in OpenClaw config, do not enable this skill.
功能分析
Type: OpenClaw Skill Name: icloud-cal Version: 2.0.1 The iCloud Calendar skill bundle is a well-architected tool for managing calendar events via CalDAV. It demonstrates strong security practices, including the use of environment variables for credentials, mandatory safety gates (CONFIRM_DELETE/CONFIRM_UPDATE) for destructive actions, and comprehensive log sanitization in scripts/add-event.py. The script includes robust input validation, such as RRULE whitelist filtering and iCal field escaping, and implements a dual-client architecture to handle varying network timeouts safely. No evidence of data exfiltration, malicious execution, or prompt injection was found.
能力评估
⚠ Purpose & Capability
The skill is an iCloud/CalDAV calendar manager and legitimately needs ICLOUD_EMAIL and ICLOUD_APP_PASSWORD and Python; the code calls caldav and performs CRUD on iCloud calendars. However, the registry metadata at the top of the package incorrectly lists 'Required env vars: none' and 'Required binaries: none' while SKILL.md/CONFIG.md and the script require Python and two environment secrets. This mismatch is misleading and increases risk (users may install without realizing they must provide credentials).
ℹ Instruction Scope
The runtime instructions and scripts focus on CalDAV operations (create/query/update/delete/search) and use only the declared iCloud creds and caldav. They write rotated logs under the skill's logs/ directory. The SKILL.md and CONFIG.md instruct users to add ICLOUD_EMAIL/ICLOUD_APP_PASSWORD to OpenClaw's openclaw.json and restart the gateway — that is expected for this integration but is a noteworthy operational step because it stores secrets in a config file (the docs advise file permission 600). No unrelated system files, network endpoints, or hidden exfil endpoints are present in the reviewed code.
✓ Install Mechanism
No remote download or binary install is embedded in the skill. The package includes a Python script and documentation instructing pip install 'caldav>=1.3.0,<2.0'. This is a normal, low-risk install path (no obscure URLs or archive extraction).
⚠ Credentials
The only runtime secrets the code actually needs are ICLOUD_EMAIL and ICLOUD_APP_PASSWORD (Apple app-specific password). That is proportionate to calendar access. The concern is that the registry metadata omitted these environment requirements entirely (metadata says none), which is inconsistent and could mislead users. The docs instruct storing the secrets in openclaw.json; while they advise file permission 600, storing long-lived credentials in a config file deserves user caution. Other safety env vars (CONFIRM_DELETE, DELETE_DRY_RUN, CONFIRM_UPDATE) are mentioned in various places but not consistently declared in metadata.
✓ Persistence & Privilege
always:false and user-invocable:true (normal). The skill writes logs into its own logs/calendar.log (RotatingFileHandler) and creates that directory under the skill bundle — this is expected for an agent-hosted skill. It does not request system-wide privileges or modify other skills. Autonomous invocation remains enabled (platform default); combine this with credential access if you want stricter controls.
如何使用
  1. 确保已安装 OpenClaw（本地或 Docker 部署）
  2. 在对话框中输入安装命令：/install icloud-cal
  3. 安装完成后，直接呼叫该 Skill 的名称或使用 /icloud-cal 触发
  4. 根据 Skill 的参数说明提供必要输入，即可获得结构化输出
版本历史
v2.0.1
Add Stage 1 tool registration metadata to SKILL.md (6 tools with params, read-only flags, confirm hints)
v2.0.0
v1.4.0->v2.0.0: 36 improvements including Dual-Client architecture (10s/60s timeouts), credential security hardening, exception sanitization, RRULE validation, dry-run delete, retry coverage, DST fixes, CalDAV error isolation
v1.4.0
Code hardening: UID support, Chinese date parsing, month/nextmonth queries, full event extraction (description+rrule+uid), update rrule support, search in description, shared search helper, 29 unit tests
v1.3.0
5 new features: RRULE recurring events, keyword search, operation logging, code cleanup, deduplicated parser
v1.2.0
Added bilingual README (CN/EN), CONFIG.md setup guide, improved description
v1.1.0
Full CRUD: create, query, update, delete events. Smart duration inference, auto calendar selection, keyword-based bulk operations.
元数据
Slug icloud-cal
版本 2.0.1
许可证 MIT-0
累计安装 0
当前安装数 0
历史版本数 6
常见问题

iCloud Calendar — Full CRUD 是什么？

Manage your iCloud calendars via natural language to create, query, update, and delete events synced to your iPhone calendar using CalDAV. 它是一个面向 Claude Code / OpenClaw 的 AI Agent Skill 插件，目前累计下载 142 次。

如何安装 iCloud Calendar — Full CRUD？

在 OpenClaw 或 Claude Code 对话框中运行命令「/install icloud-cal」即可一键安装，无需额外配置。

iCloud Calendar — Full CRUD 是免费的吗？

是的，iCloud Calendar — Full CRUD 完全免费，采用 MIT-0 许可证，可自由下载、安装和使用。

iCloud Calendar — Full CRUD 支持哪些平台？

iCloud Calendar — Full CRUD 跨平台运行，可在任意部署了 OpenClaw / Claude Code 的环境中使用（cross-platform）。

谁开发了 iCloud Calendar — Full CRUD？

由 RickHuang28（@rickhuang28）开发并维护，当前版本 v2.0.1。

推荐 Skills
self-improving agent
Captures learnings, errors, and corrections to enable continuous improvement. Use when: (1) A command or operation fails unexpectedly, (2) User corrects Clau...
⬇ 463283 · by pskoett
Skill Vetter
Security-first skill vetting for AI agents. Use before installing any skill from ClawdHub, GitHub, or other sources. Checks for red flags, permission scope, and suspicious patterns.
⬇ 259410 · by spclaudehome
Polymarket
Query Polymarket prediction markets. Check odds, find trending markets, search events, track price movements.
⬇ 232503 · by joelchance
Self-Improving + Proactive Agent
Self-reflection + Self-criticism + Self-learning + Self-organizing memory. Agent evaluates its own work, catches mistakes, and improves permanently. Use when...
⬇ 200423 · by ivangdavila
Github
Interact with GitHub using the `gh` CLI. Use `gh issue`, `gh pr`, `gh run`, and `gh api` for issues, PRs, CI runs, and advanced queries.
⬇ 191113 · by steipete
ontology
Typed knowledge graph for structured agent memory and composable skills. Use when creating/querying entities (Person, Project, Task, Event, Document), linkin...
⬇ 190156 · by oswalpalash

💬 留言讨论