Agent skill · software engineering · sundial-org
healthkit-sync
iOS HealthKit data sync CLI commands and patterns. Use when working with healthsync CLI, fetching Apple Health data (steps, heart rate, sleep, workouts), pairing iOS devices over local network, or understanding the iOS Health Sync project architecture including mTLS certificate pinning, Keychain storage, and audit logging.
Why this skill is useful
Provides specific CLI commands and patterns for syncing Apple Health data that the AI wouldn't reliably generate on its own.
What it needs
Requires healthsync installed locally. About 2k tokens when loaded. Last updated 2026-03-07. 639 stars on the source repository.
What this skill does
HealthKit Sync CLI Securely sync Apple HealthKit data from iPhone to Mac over local network using mTLS. When to Use This Skill User asks about syncing health data from iPhone User mentions healthsync CLI commands User wants to fetch steps, heart rate, sleep, or workout data User needs to pair a Mac with an iOS device User asks about the iOS Health Sync project architecture User mentions certificate pinning or mTLS patterns CLI Quick Reference Pairing Flow (First Time) Fetching Health Data Available Health Data Types Activity: steps, distanceWalkingRunning, distanceCycling, activeEnergyBurned, basalEnergyBurned, exerciseTime, standHours, flightsClimbed, workouts Heart: heartRate, restingHeartRate, walkingHeartRateAverage, heartRateVariability Vitals: bloodPressureSystolic, bloodPressureDiastolic, bloodOxygen, respiratoryRate, bodyTemperature, vo2Max Sleep: sleepAnalysis, sleepInBed, sleepAsleep, sleepAwake, sleepREM, sleepCore, sleepDeep Body: weight, height, bodyMassIndex, bodyFatPercentage, leanBodyMass Configuration Config stored at ~/.healthsync/config.json (permissions: 0600): Token stored in macOS Keychain under service org.mvneves.healthsync.cli. Security Architecture Certificate Pinning The CLI validates server certificates by SHA256 fingerprint (TOFU model): 1. First pairing stores fingerprint from QR code 2. Subsequent connections verify fingerprint matches 3. Mismatch = connection rejected (MITM protection) Local Network Only Host validation restricts connections to: localhost, .local domains Private IPv4: 192.168., 10., 172.16-31. …
How to use it
Reference it in AdaL, Claude Code, Cursor or any coding agent — nothing to install:
@skills sundial-org/healthkit-sync