refactor: move skills/calcom-api/ to agents/skills/ and declare credentials

[PeerRich]

What does this PR do?

Consolidates the duplicate skills/calcom-api/ folder into agents/skills/calcom-api/ and adds credential declarations.

1. Moves skills/calcom-api/ into agents/skills/calcom-api/ — the root skills/ folder was a duplicate of agents/skills/calcom-api/. The skills/ version (with full inline API documentation) is now the canonical content in agents/skills/calcom-api/SKILL.md, replacing the previous concise reference-based version. The reference files in agents/skills/calcom-api/references/ are unchanged (they already existed and were more complete than the skills/ copies).

2. Declares credentials/environment variables in agents/skills/calcom-api/SKILL.md — adds machine-readable env declarations in YAML frontmatter and a human-readable "Required Credentials" table. This addresses a ClawHub.ai "Suspicious, medium confidence" warning that flagged undeclared secrets.

Declared environment variables

Variable	Required	Purpose
CAL_API_KEY	Yes	Bearer token for all API requests
CAL_CLIENT_ID	No	OAuth client ID for platform integrations
CAL_SECRET_KEY	No	OAuth client secret for platform integrations
CAL_WEBHOOK_SECRET	No	Webhook signature verification secret

Mandatory Tasks (DO NOT REMOVE)

• I have self-reviewed the code (A decent size PR without self-review might be rejected).
• I have updated the developer docs in /docs if this PR makes changes that would require a documentation change. N/A — this is a docs-only change to the skill file itself.
• I confirm automated tests are in place that prove my fix is effective or that my feature works. N/A — documentation-only change.

How should this be tested?

No functional testing required — metadata/documentation change only.

• Verify the YAML frontmatter parses correctly (the env block under metadata is valid YAML).
• Verify the markdown table renders correctly on GitHub.
• Verify nothing in the codebase references the deleted skills/ path.

Human Review Checklist

• No dangling references to skills/: Confirm nothing else in the repo (CI configs, scripts, docs) references the old skills/calcom-api/ path that was removed.
• Content duplication: The moved SKILL.md now has full inline API documentation (bookings, event types, schedules, etc.) while the references/ directory also contains this content in more detail. Confirm this overlap is acceptable or if the SKILL.md should remain concise and reference the docs.
• Env var naming: The webhook reference doc (references/webhooks.md line 192) uses process.env.WEBHOOK_SECRET, but this PR declares it as CAL_WEBHOOK_SECRET (with CAL_ prefix for namespacing). Confirm the preferred convention.
• Credential completeness: Verify no other credentials referenced in the references/ docs are missing from this declaration.
• Frontmatter format: The env block under metadata uses a description/required structure. Confirm this aligns with what ClawHub tooling expects.

Checklist

• My code follows the style guidelines of this project
• My changes generate no new warnings

---

Link to Devin run: https://app.devin.ai/sessions/12bdc7a018c3445da61ebf9b02ec8f10
Requested by: @PeerRich

[devin-ai-integration]

🤖 Devin AI Engineer

I'll be helping with this pull request! Here's what you should know:

✅ I will automatically:

• Address comments on this PR that start with 'DevinAI' or '@devin'.
• Look at CI failures and help fix them

Note: I can only respond to comments from users who have write access to this repository.

⚙️ Control Options:

• Disable automatic comment and CI monitoring

[cubic-dev-ai]

No issues found across 1 file

[paragon-review]

Paragon: tests updated

1 new test generated for this PR.

New Tests

• calcom-api skill definition — Tests that validate the SKILL.md frontmatter metadata and env var definitions

Details

New Tests

• calcom-api skill definition (unit)