garmin-pulse

Pass

Audited by Gen Agent Trust Hub on Mar 29, 2026

Risk Level: SAFE
Full Analysis
  • [EXTERNAL_DOWNLOADS]: The documentation provides instructions for installing the uv tool via an official shell script from astral.sh. This is a recognized installation method for a well-known developer tool.
  • [CREDENTIALS_UNSAFE]: Authentication is managed securely through interactive prompts in the terminal, ensuring passwords are not exposed in command arguments. Sensitive OAuth tokens are stored in the user's home directory (~/.garminconnect/), following standard local credential management practices.
  • [DATA_EXFILTRATION]: The skill performs network requests to Garmin's official servers to retrieve fitness data. This activity is transparently documented and aligned with the skill's primary purpose.
Audit Metadata
Risk Level
SAFE
Analyzed
Mar 29, 2026, 08:52 AM