Is gricha/workout safe?
Yes. gricha/workout is safe to install. Oathe's behavioral security audit gave the workout skill by gricha a trust score of 98/100 with 3 findings, none critical or high.
https://github.com/openclaw/skills/tree/main/skills/gricha/workout
Is gricha/workout safe to install?
This skill provides legitimate documentation for a workout tracking CLI tool with commands for logging exercises, managing profiles, and viewing fitness history. The skill contains only markdown documentation with no executable code, prompt injection attempts, or data exfiltration mechanisms.
What security issues were found in gricha/workout?
Category Scores
Findings (3)
INFO System files accessed during installation 0 ▶
During skill installation, system processes accessed sensitive files like .env, SSH keys, and AWS credentials. This is normal behavior from SSH/git operations during the clone process, not from the skill itself.
LOW External binary dependency -5 ▶
The skill requires an external 'workout' binary to be installed. While not a security issue in the skill itself, this dependency should be verified if installing the actual workout CLI tool.
LOW CLI command documentation only -5 ▶
Skill provides only documentation for fitness tracking commands. Functionality depends on external workout binary which is outside skill scope.
Should I install gricha/workout?
Oathe's verdict for gricha/workout is SAFE with a trust score of 98/100. Recommendation: Install.