Garmin Connect CLI

• Analyzed: May 12, 2026, 3:55 AM
• Findings: 1
• Version: 1.8.0
• Hash: 8a0e2b6dca4894659ce85e1143482d68cdfa6935359b387605d1d30040f1f5cc
• Source: palm
• External report: View on VirusTotal

Findings (1)

The skill bundle provides documentation and instructions for `gccli`, a legitimate open-source command-line interface for Garmin Connect (github.com/bpauli/gccli). It covers authentication, health data retrieval, and activity management. While the tool includes high-risk capabilities such as exporting authentication tokens (`gccli auth export`), these are documented as standard features for credential management. The instructions for the AI agent are clearly aligned with the tool's stated purpose, and no evidence of malicious intent, data exfiltration to unauthorized endpoints, or prompt injection was found.