gym — independently scanned and version-tracked by SaferSkills.
SaferSkills independently audited gym (Plugin) and scored it 100/100 (green). The audit ran 55 deterministic rules across Security, Supply Chain, Maintenance, Transparency, and Community; it found 0 high-severity and 0 lower-severity findings. The full rule-by-rule trace and per-finding evidence are below. Free, methodology-open.
Findings & checks · 0 flagged
Every scanned point with the score it earned and what moved between them.
First recorded scan — no prior version to compare against.
The primary manifest — the file an agent reads to learn what this artifact does.
Universal MCP server + Claude Code plugin for Gymtracker. Lets AI coding agents (Claude Code, Codex, Cursor, …) read and write your training data.
GYMTRACKER_URL)GYMTRACKER_TOKEN)| Env | Read | Write | Delete |
|---|---|---|---|
| (default) | ✅ | ✅ | ❌ |
GYMTRACKER_ALLOW_DELETE=1 | ✅ | ✅ | ✅ |
GYMTRACKER_READONLY=1 | ✅ | ❌ | ❌ |
READONLY overrides ALLOW_DELETE.
/plugin marketplace add https://gitlab.com/codin-public/gymtracker-plugin.git
/plugin install gym@gymtrackerYou'll be prompted for your URL and token. Adds /gym:log, /gym:summary, /gym:coach.
See examples/codex.md.
See examples/cursor.md and examples/generic-mcp.json.
client's env block (or Cursor's ${env:...}).
npx (nvm/Homebrew).Use an absolute path to npx/node in command if startup fails.
npx -y fetches the package once; bump Codex'sstartup_timeout_sec if it times out.
npm install
npm test
npm run buildMIT
~30 seconds. Free. No account. Every finding cites a rule and a line of evidence.