Samsung Health

• Analyzed: May 12, 2026, 4:19 AM
• Findings: 1
• Version: 1.0.1
• Hash: f350c6b59a8adff9fdd2afa57b53063d0866870c321fa598f2867c657cea1727
• Source: palm
• External report: View on VirusTotal

Findings (1)

The skill is classified as suspicious due to its installation method, which involves cloning and executing code from an external GitHub repository (https://github.com/mudgesbot/samsung-health-skill.git) via `git clone` and `pip install -e .` commands in SKILL.md. While this is a common installation pattern, it introduces a supply chain risk as the integrity and content of the remote repository are not verified within the scope of the provided files. This constitutes a 'risky capability' without clear malicious intent in the provided files, aligning with the 'suspicious' classification rather than 'benign' (due to the high-risk behavior) or 'malicious' (due to lack of direct evidence of intentional harm).