Back to skill
Skillv1.0.0

VirusTotal security

Garmin Skill · External malware reputation and Code Insight signals for this exact artifact hash.

Scanner verdict

BenignApr 29, 2026, 3:37 AM
Hash
d2b08a9588853079c2dc08f645d3d20aa082719e3399e1c50888b45c7f36e29c
Source
palm
Verdict
benign
Code Insight
Type: OpenClaw Skill Name: garmin-skill Version: 1.0.0 The skill bundle is benign. All network calls are directed to the legitimate `api.transition.fun` domain, consistent with the stated purpose of interacting with Garmin data via the Transition API. The `TRANSITION_API_KEY` is used appropriately for authentication and there are no instructions for data exfiltration, malicious execution (e.g., `curl|bash`), persistence, or obfuscation. The instructions in `SKILL.md` for the AI agent are functional and guide the agent on how to use the API effectively, without any evidence of prompt injection attempting to subvert the agent's behavior or access unrelated sensitive data.
External report
View on VirusTotal