Is bpauli/garmin-connect-cli safe?

https://github.com/openclaw/skills/tree/main/skills/bpauli/garmin-connect-cli

99
SAFE

This skill provides legitimate documentation for gccli, a Garmin Connect CLI tool for fitness data management. The skill contains only documentation files with no executable code, exhibits normal installation behavior, and shows no signs of malicious activity.

Category Scores

Prompt Injection 98/100 · 30%
Data Exfiltration 100/100 · 25%
Code Execution 100/100 · 20%
Clone Behavior 100/100 · 10%
Canary Integrity 100/100 · 10%
Behavioral Reasoning 97/100 · 5%

Findings (2)

INFO External URL Reference -2 ▶

Skill documentation contains references to external GitHub URLs for the project homepage and installation instructions.

INFO External Tool Authentication -3 ▶

The documented CLI tool requires Garmin account authentication and credential storage, which introduces minor privacy considerations.