Trust Assessment
fitbit received a trust score of 82/100, placing it in the Mostly Trusted category. This skill has passed most security checks with only minor considerations noted.
SkillShield's automated analysis identified 2 findings: 0 critical, 1 high, 1 medium, and 0 low severity. Key findings include Potential Command Injection via unsanitized user input to `fitbit-cli`, Unpinned external binary dependency `fitbit-cli`.
The analysis covered 4 layers: Manifest Analysis, Static Code Analysis, Dependency Graph, LLM Behavioral Safety. All layers scored 70 or above, reflecting consistent security practices.
Last analyzed on February 13, 2026 (commit 13146e6a). SkillShield performs automated 4-layer security analysis on AI skills and MCP servers.
Layer Breakdown
Behavioral Risk Signals
Security Findings2
| Severity | Finding | Layer | Location | |
|---|---|---|---|---|
| HIGH | Potential Command Injection via unsanitized user input to `fitbit-cli` The skill's documentation demonstrates constructing shell commands using `fitbit-cli` where date/time parameters (e.g., 'yesterday', 'last-week', '2026-01-01') are directly appended to the command. If the host LLM directly inserts unsanitized user input into these parameters, it could lead to command injection, allowing an attacker to execute arbitrary commands on the system. For example, a malicious date string like `2026-01-01; rm -rf /` could be executed. The LLM orchestrating this skill must rigorously sanitize and validate all user-provided arguments before constructing and executing shell commands. Alternatively, the skill should define a more structured interface for parameters that prevents direct shell injection. | LLM | SKILL.md:47 | |
| MEDIUM | Unpinned external binary dependency `fitbit-cli` The skill relies on an external binary `fitbit-cli` as indicated in the manifest's `metadata.clawdbot.requires.bins`. There is no version pinning or specified source/checksum for this dependency. This introduces a supply chain risk, as a compromised or malicious version of `fitbit-cli` could be installed on the host system, leading to system compromise or data exfiltration. Specify a pinned version for `fitbit-cli` and ideally a trusted source or checksum to ensure the integrity and authenticity of the binary. Implement robust dependency management practices for all external binaries. | LLM | SKILL.md:1 |
Scan History
Embed Code
[](https://skillshield.io/report/6cac6f4bcc1a6302)
Powered by SkillShield