技能详情(站内镜像,无评论)
许可证:MIT-0
MIT-0 ·免费使用、修改和重新分发。无需归因。
版本:v1.0.0
统计:⭐ 0 · 925 · 1 current installs · 1 all-time installs
⭐ 0
安装量(当前) 1
🛡 VirusTotal :良性 · OpenClaw :可疑
Package:abclark/strava-python
安全扫描(ClawHub)
- VirusTotal :良性
- OpenClaw :可疑
OpenClaw 评估
The skill's files and instructions largely match a Strava client (Python + stravalib) and request only expected local credentials, but a prompt-injection indicator was found in SKILL.md and the skill stores secrets in a local plaintext file — worth caution before installing.
目的
Name/description, required binary (python3), pip dependency (stravalib), and included scripts (setup.py, strava_control.py) are coherent for a Strava Python client. No unrelated services, binaries, or credentials are requested.
说明范围
SKILL.md instructs the user to create a Strava app, run an interactive setup, and save OAuth tokens to ~/.strava_credentials.json — this matches the included setup.py which performs those actions. However a pre-scan found 'unicode-control-chars' in SKILL.md (a prompt-injection indicator), which is unexpected and should be inspected; otherwise the runtime instructions stay within the stated purpose and do not attempt to read unrelated system fi…
安装机制
There is no arbitrary download/install script — the metadata/instructions use pip to install the well-known 'stravalib' package. This is a standard install mechanism for a Python skill and proportional to the task.
证书
The skill does not require environment variables and instead asks interactively for your Strava Client ID/Secret and stores tokens locally. That is reasonable for this purpose, but the setup writes client_secret, access_token and refresh_token in plaintext to ~/.strava_credentials.json — expected for a simple tool but a sensitive practice. No unrelated credentials are requested.
持久
The skill does not request always:true nor modify other skills or system-wide settings. It creates one file in the user's home (~/.strava_credentials.json) to persist its own credentials, which is expected behavior for this type of tool.
安装(复制给龙虾 AI)
将下方整段复制到龙虾中文库对话中,由龙虾按 SKILL.md 完成安装。
请把本段交给龙虾中文库(龙虾 AI)执行:为本机安装 OpenClaw 技能「Strava Python」。简介:Query Strava activities, stats, and workout data using Python/stravalib with in…。
请 fetch 以下地址读取 SKILL.md 并按文档完成安装:https://raw.githubusercontent.com/openclaw/skills/refs/heads/main/skills/abclark/strava-python/SKILL.md
(来源:yingzhi8.cn 技能库)
SKILL.md
---
name: strava-python
version: 1.0.0
description: Query Strava activities, stats, and workout data using Python/stravalib with interactive setup
homepage: https://www.strava.com
metadata:
openclaw:
emoji: 🏃
requires:
bins:
- python3
install:
- id: pip
kind: pip
package: stravalib
label: Install stravalib (pip)
---
# Strava Python
Query your Strava activities, stats, and workout data through OpenClaw using Python and stravalib.
**Why this skill vs others:** Uses Python/stravalib with an interactive setup wizard (vs curl-based skills requiring manual JSON configuration).
## Requirements
- Python 3.7+
- `stravalib` package
- Strava API credentials (free)
## Setup
1. **Install dependencies:**
```bash
pip install stravalib
```
2. **Run setup:**
```bash
python3 setup.py
```
This will:
- Guide you through creating a Strava API app
- Handle OAuth authentication
- Save credentials to `~/.strava_credentials.json`
## Commands
**Recent activities:**
```bash
python3 strava_control.py recent
```
**Weekly/monthly stats:**
```bash
python3 strava_control.py stats
```
**Last activity:**
```bash
python3 strava_control.py last
```
## Examples
Ask OpenClaw:
- "Show my recent Strava activities"
- "What are my Strava stats this week?"
- "What was my last Strava workout?"
## Files
- `strava_control.py` - Main controller script
- `setup.py` - Interactive setup wizard
- `SKILL.md` - This file
- `~/.strava_credentials.json` - Credentials (auto-generated)
## Notes
- Requires Strava account (free)
- API credentials are personal and should not be shared
- Rate limits: 100 requests per 15 minutes, 1,000 daily