withings

SUSPICIOUS: the skill’s purpose is coherent and the documented data access matches Withings use, but it relies on an unspecified `withings` binary from PATH with no verifiable install source or publisher. Because multiple unrelated third-party CLIs exist under similar names, the executable is ambiguous; for a health-data skill, that unverifiable dependency makes the install/execution trust high risk even without clear evidence of malicious intent.