Trust Assessment
fitbit received a trust score of 16/100, placing it in the Untrusted category. This skill has significant security findings that require attention before use in production.
SkillShield's automated analysis identified 5 findings: 2 critical, 1 high, 1 medium, and 1 low severity. Key findings include Network egress to untrusted endpoints, Unpinned npm dependency version, Node lockfile missing.
The analysis covered 4 layers: Manifest Analysis, Static Code Analysis, Dependency Graph, LLM Behavioral Safety. The Manifest Analysis layer scored lowest at 40/100, indicating areas for improvement.
Last analyzed on February 13, 2026 (commit 13146e6a). SkillShield performs automated 4-layer security analysis on AI skills and MCP servers.
Layer Breakdown
Behavioral Risk Signals
Security Findings5
| Severity | Finding | Layer | Location | |
|---|---|---|---|---|
| CRITICAL | Network egress to untrusted endpoints HTTP request to raw IP address Review all outbound network calls. Remove connections to webhook collectors, paste sites, and raw IP addresses. Legitimate API calls should use well-known service domains. | Manifest | skills/pb3975/fitbit-health/src/client/auth.ts:37 | |
| CRITICAL | Network egress to untrusted endpoints HTTP request to raw IP address Review all outbound network calls. Remove connections to webhook collectors, paste sites, and raw IP addresses. Legitimate API calls should use well-known service domains. | Manifest | skills/pb3975/fitbit-health/src/client/auth.ts:234 | |
| HIGH | Arbitrary File Write via --output option The skill's `writeOutput` function, used across multiple commands (activity, auth status, profile, summary), directly uses the value provided to the `--output` command-line option as a file path for `fs.writeFile`. This allows an attacker to specify an arbitrary file path on the system to write the output of Fitbit API calls (e.g., user profile, activity data, authentication status). This could lead to overwriting critical system files, writing sensitive user data to unexpected or publicly accessible locations, or other forms of data exfiltration/tampering. Restrict the `--output` option to a safe, sandboxed directory (e.g., a temporary directory or a specific output folder within the skill's scope). Sanitize the provided path to prevent directory traversal attacks (e.g., `../`). Alternatively, if writing to arbitrary paths is not intended, remove the `--output` option or implement stricter path validation. | LLM | src/utils/output.ts:39 | |
| MEDIUM | Unpinned npm dependency version Dependency 'chalk' is not pinned to an exact version ('^5.3.0'). Pin dependencies to exact versions to reduce drift and supply-chain risk. | Dependencies | skills/pb3975/fitbit-health/package.json | |
| LOW | Node lockfile missing package.json is present but no lockfile was found (package-lock.json, pnpm-lock.yaml, or yarn.lock). Commit a lockfile for deterministic dependency resolution. | Dependencies | skills/pb3975/fitbit-health/package.json |
Scan History
Embed Code
[](https://skillshield.io/report/7ce939bb71954b92)
Powered by SkillShield