ClawHub

Garmin Connect CLI

v1.7.1

Garmin Connect CLI for activities, health, body composition, workouts, devices, gear, goals, and more.

⭐ 1· 1.1k·5 current·5 all-time
byBurkhard Pauli@bpauli
MIT-0
Download zip
LicenseMIT-0 · Free to use, modify, and redistribute. No attribution required.
Security Scan
VirusTotalVirusTotal
Benign
View report →
OpenClawOpenClaw
Benign
high confidence
✓
Purpose & Capability
Name/description match the requested artifact: the skill requires the gccli binary and documents commands for Garmin Connect operations (activities, health, workouts, etc.). Requesting the gccli binary and offering a Homebrew formula or build-from-source URL is proportional to the described purpose.
ℹ
Instruction Scope
SKILL.md instructs the agent to run gccli commands (auth login/status/token/export, list/download/upload activities, health queries). This is within scope. Note: the docs explicitly describe exporting auth tokens and headless login (MFA) which, while legitimate for scripting, means a running agent could read or export your Garmin auth tokens and health data — sensitive but expected for this tool.
✓
Install Mechanism
Install spec uses a Homebrew formula (bpauli/tap/gccli). Homebrew taps are a normal distribution mechanism for CLI tools. The formula references the same upstream project (GitHub repo listed in homepage), which is proportionate. No high-risk download-from-unknown-URL patterns are present.
✓
Credentials
The skill declares no required environment variables or credentials beyond using gccli's own auth flow. That aligns with the documented behavior (gccli uses Garmin SSO managed interactively or via exported tokens). No unrelated secrets or system config paths are requested.
✓
Persistence & Privilege
The skill is not always-enabled and does not request elevated persistence. It is user-invocable and allows autonomous invocation (platform default), which is expected for skills and not by itself a red flag.
Assessment
This skill appears to be what it says: a wrapper around the gccli command-line tool. Before installing, verify you trust the Homebrew tap owner (bpauli) and the upstream GitHub repo. Be aware that gccli requires Garmin SSO credentials and can export auth tokens and personal health/activity data — avoid running it on untrusted systems or sharing exported tokens. If you want to limit risk, install gccli locally yourself and only grant the skill access when needed; consider disabling autonomous invocation if you do not want the agent to run the CLI without explicit consent.

Like a lobster shell, security has layers — review code before you run it.

latestvk971txymqsn9xenzhgw76tje5584cf8b

License

MIT-0
Free to use, modify, and redistribute. No attribution required.
Termshttps://spdx.org/licenses/MIT-0.html

Runtime requirements

⌚ Clawdis
OSmacOS · Linux
Binsgccli

Install

Homebrew (recommended)
Bins: gccli
brew install bpauli/tap/gccli

Comments