garmin-pulse
Pass
Audited by Gen Agent Trust Hub on Mar 29, 2026
Risk Level: SAFE
Full Analysis
- [EXTERNAL_DOWNLOADS]: The documentation provides instructions for installing the
uvtool via an official shell script fromastral.sh. This is a recognized installation method for a well-known developer tool. - [CREDENTIALS_UNSAFE]: Authentication is managed securely through interactive prompts in the terminal, ensuring passwords are not exposed in command arguments. Sensitive OAuth tokens are stored in the user's home directory (
~/.garminconnect/), following standard local credential management practices. - [DATA_EXFILTRATION]: The skill performs network requests to Garmin's official servers to retrieve fitness data. This activity is transparently documented and aligned with the skill's primary purpose.
Audit Metadata