读取 Garmin Connect 手表/设备数据。 触发场景： - "今天走了多少步" - "昨晚睡眠怎么样" - "最近有什么运动" - "心率怎么样" - "这周跑了多少次" - 查询任意日期的运动、睡眠、心率等健康数据

This skill appears internally consistent and implements exactly what it says: it queries Garmin Connect APIs using a browser-extracted JWT. Before installing/running it, remember: (1) the JWT is a sensitive bearer token — treat it like a password and do not share it; (2) follow the README steps locally and inspect the included scripts yourself before running; (3) the scripts print data to stdout only, but if you store the token in an environment variable or a file, be careful not to commit or share it; (4) the scripts include a hard-coded default userId from the author — you can ignore that and let the code fetch your userId via the API. If you are uncomfortable extracting tokens from your browser, do not use the skill.

Type: OpenClaw Skill Name: garmin-connect-cn Version: 1.0.0 The skill is designed to query health and activity data from the Garmin Connect China API (connect.garmin.cn) using a user-provided JWT token. The scripts (scripts/query.py and scripts/activities.py) perform legitimate API requests to official Garmin endpoints and print the results to the console. While there are hardcoded default user IDs and example email addresses in the documentation and scripts (e.g., user ID 116181268), these appear to be developer artifacts or placeholders rather than malicious indicators. No evidence of data exfiltration, unauthorized network calls, or prompt injection was found.