The Agent Skills Directory

[REMOTE_CODE_EXECUTION]: The setup instructions in README.md and SKILL.md suggest an installation method via curl -fsSL https://raw.githubusercontent.com/broomva/skills/main/skills/health/install.sh | bash. This script, hosted in the author's own GitHub repository, automates the creation of a virtual environment and dependency installation.
[COMMAND_EXECUTION]: The Garmin source adapter (src/broomva_health/adapters/sources/garmin_cli.py) utilizes subprocess.run to call the garmin-connect utility. This is a documented delegated authentication backend intended to manage the Garmin token lifecycle outside the skill's direct control.
[EXTERNAL_DOWNLOADS]: When the installation script is run, it performs a git clone of the broomva/skills monorepo if no local source is detected. This is used to retrieve the package source code and its associated configuration files.
[DATA_EXFILTRATION]: The skill performs legitimate network synchronization with Garmin Connect API endpoints (e.g., connect.garmin.com) using the garth and garminconnect libraries. These operations are restricted to vendor-approved domains and are core to the skill's stated purpose of ingesting health data.

health