Back to skill
Skillv0.1.0

VirusTotal security

Garmin · External malware reputation and Code Insight signals for this exact artifact hash.

Scanner verdict

BenignApr 30, 2026, 4:14 AM
Hash
c99c6e2837d4993ad42785fe01c1400a5f45fb56c6ed98b3dceaf15ef81fbd88
Source
palm
Verdict
benign
Code Insight
Type: OpenClaw Skill Name: garmin-connect-thebyteio Version: 0.1.0 The skill is benign. It integrates with Garmin Connect to fetch fitness metrics, using 1Password CLI for secure credential management (as explicitly documented in SKILL.md and implemented in scripts/garmin-login.sh and scripts/get-stats.py). Garmin session tokens are temporarily cached in `/tmp/garmin-session/`. All file system and network operations are consistent with the stated purpose, and there is no evidence of data exfiltration, unauthorized execution, persistence mechanisms, or prompt injection attempts against the AI agent in any of the files.
External report
View on VirusTotal