Oathe Security Badge

Is nftechie/strava-skill safe?

Yes. nftechie/strava-skill is safe to install. Oathe's behavioral security audit gave the strava-skill skill by nftechie a trust score of 93/100 with 2 findings, none critical or high. Report updated

https://github.com/nftechie/strava-skill

93
SAFE

Is nftechie/strava-skill safe to install?

This is a legitimate fitness tracking skill that provides API documentation for accessing Strava data through the Transition service. The skill contains only markdown documentation with no executable code or malicious behavior detected.

What security issues were found in nftechie/strava-skill?

Category Scores

Prompt Injection 100/100 · 30%
Data Exfiltration 95/100 · 25%
Code Execution 100/100 · 20%
Clone Behavior 100/100 · 10%
Canary Integrity 100/100 · 10%
Behavioral Reasoning 85/100 · 5%

Findings (2)

LOW External API Dependency -5 ▶

The skill relies on the Transition API (api.transition.fun) to access Strava data. Users must trust this third-party service with their fitness data and provide API credentials.

LOW Third-party Service Trust Model -15 ▶

The skill requires users to create accounts with Transition service and share Strava credentials, creating an additional trust boundary beyond the direct Strava integration.

Should I install nftechie/strava-skill?

Oathe's verdict for nftechie/strava-skill is SAFE with a trust score of 93/100. Recommendation: Install.