Heartrate

• Analyzed: May 14, 2026, 7:00 AM
• Findings: 1
• Version: 2.0.1
• Hash: fd48240029126c343f65ad8466330543829aeaaef61bf802fa2291293318ce9b
• Source: palm
• External report: View on VirusTotal

Findings (1)

The Heartrate skill is a legitimate health tracking utility that allows users to log and analyze heart rate data locally. All data is stored in the user's local directory (~/.local/share/heartrate/), and the script (scripts/script.sh) contains standard bash logic for file appending, searching, and basic data export (JSON/CSV/TXT). While the SKILL.md documentation contains some confusingly formatted command examples that include shell-like variables, and the script has a minor bug where the 'export' command is shadowed by a logging function, there is no evidence of data exfiltration, malicious execution, or prompt injection intended to harm the system.