Run Coach

• Analyzed: May 14, 2026, 7:46 AM
• Findings: 1
• Version: 1.0.7
• Hash: e99234862275e73489559ee722ef235ca13333dae1e17d10521a0d260b8387ab
• Source: palm
• External report: View on VirusTotal

Findings (1)

The 'run-coach' skill is a legitimate tool for tracking running activities and generating visual training plans. It uses the official Telegram Bot API and the 'garminconnect' library to sync user data, with all sensitive credentials (tokens and passwords) managed via environment variables as per standard OpenClaw practices. The code logic in 'training/text-to-image.sh' and 'training/screenshot.mjs' is transparent, focusing on rendering HTML to images using Playwright, and lacks any indicators of data exfiltration, persistence, or malicious intent.