withings
Pass
Audited by Gen Agent Trust Hub on Oct 5, 2026
Risk Level: SAFE
Full Analysis
- [SAFE]: The skill utilizes a dedicated local CLI (
withings) to interact with official Withings API endpoints (wbsapi.withings.net,account.withings.com), adhering to standard integration patterns for well-known services. - [SAFE]: Authentication is handled through a secure OAuth configuration that employs token proxying and stripping to ensure the AI agent never has access to raw access or refresh tokens.
- [SAFE]: Explicit instructions are provided to the agent to prevent the disclosure of credentials or tokens and to respect data withholding flags when user permissions are restricted.
- [SAFE]: The skill follows least-privilege principles by scoping data access to specific health categories and providing clear aggregation rules for sensitive metrics.
Audit Metadata