ghealth-shared
Pass
Audited by Gen Agent Trust Hub on Jul 1, 2026
Risk Level: SAFECOMMAND_EXECUTIONCREDENTIALS_UNSAFE
Full Analysis
- [COMMAND_EXECUTION]: The skill outlines the use of the
ghealthCLI tool to perform setup and manage authentication workflows. It details various command structures for querying health data, managing user profiles, and configuring webhooks, all of which are primary functions of the skill. - [CREDENTIALS_UNSAFE]: The documentation identifies that sensitive OAuth artifacts, specifically access and refresh tokens, are stored locally in plaintext JSON files within the
~/.config/ghealth/directory. The skill notes that these files are created with restricted filesystem permissions (0600) to protect the stored credentials from unauthorized local access.
Audit Metadata