Security audit
Security checks across malware telemetry and agentic risk
This Garmin health-data sync skill is disclosed enough to avoid a malicious verdict, but it embeds account credentials and gives an agent broad authority over browser sessions, health databases, and remote pushes.
Review before installing. Only use this in an environment where you own the Garmin account, the browser profile, the databases, and the git remotes. Remove the embedded credentials, replace session reuse with an explicit user-approved authentication flow, make all storage and remote destinations configurable, and require confirmation before any database write or push.
65/65 vendors flagged this skill as clean.
No suspicious patterns detected.
