Dexcom CGM

• Analyzed: May 12, 2026, 3:02 AM
• Findings: 1
• Version: 1.0.4
• Hash: ee4f76b2787d6958fc1b81e6d25048fae34a0ce2cd0e01ae464aaa92b9ccbf8a
• Source: palm
• External report: View on VirusTotal

Findings (1)

The skill is designed to monitor blood glucose via Dexcom. It retrieves Dexcom credentials from environment variables (DEXCOM_USER, DEXCOM_PASSWORD) and uses the `pydexcom` library to interact with the Dexcom API. The `scripts/glucose.py` file then processes and displays this data. There is no evidence of data exfiltration to unauthorized endpoints, malicious execution, persistence mechanisms, prompt injection attempts in `SKILL.md`, or obfuscation. All actions are clearly aligned with the stated purpose of monitoring Dexcom data.