fitness-agent-9ae8e7 — independently scanned and version-tracked by SaferSkills.
SaferSkills independently audited fitness-agent-9ae8e7 (Agent Skill) and scored it 100/100 (green). The audit ran 55 deterministic rules across Security, Supply Chain, Maintenance, Transparency, and Community; it found 0 high-severity and 0 lower-severity findings. The full rule-by-rule trace and per-finding evidence are below. Free, methodology-open.
Findings & checks · 0 flagged
Every scanned point with the score it earned and what moved between them.
First recorded scan — no prior version to compare against.
The primary manifest — the file an agent reads to learn what this artifact does.
Use the bundled wrapper script to run the local CLI:
scripts/run_fitness_agent.sh --helpThe skill is self-contained. The wrapper resolves the skill root relative to its own location, so it works after cloning the repository or after copying the skill directory into a local skills folder.
sync latest when the user wants the full Obsidian analysis surface, because it writes activity notes plus dashboard and weekly/monthly reports.Prefer the CLI defaults unless the user asks otherwise. Do not add --overwrite unless the user explicitly wants to replace an existing file or note.
Authenticate with Strava:
scripts/run_fitness_agent.sh auth login \
--client-id YOUR_CLIENT_ID \
--client-secret YOUR_CLIENT_SECRETConfigure the default Obsidian vault:
scripts/run_fitness_agent.sh config set-vault \
--vault-path "/path/to/YourVault" \
--default-folder "Fitness/Strava"List recent activities:
scripts/run_fitness_agent.sh activities list --limit 5Export one activity as Obsidian Markdown:
scripts/run_fitness_agent.sh activities export --activity-id 123456789Write one activity into the configured vault:
scripts/run_fitness_agent.sh vault write --activity-id 123456789Sync the latest activities into the configured vault:
scripts/run_fitness_agent.sh sync latest --limit 3This sync now writes:
Activities/YYYY/MM/Dashboard/Fitness Dashboard.baseDashboard/Fitness Dashboard.mdReports/Weekly/Reports/Monthly/~/.fitness-agent/config.json as the default local config unless the user provides --config-path.activities export before vault writes when the user wants to inspect or revise the generated Markdown first.http://localhost:33371/callback when the user asks how auth works.sync latest also backfills affected week/month context to keep reports complete.$fitness-agent 帮我登录 Strava 并配置我的 Obsidian vault$fitness-agent 列出最近 10 条 Strava 活动$fitness-agent 把活动 123456789 导出成 Obsidian Markdown$fitness-agent 把最近 3 条 Strava 活动同步到我的 vaultfitness_agent.py: Self-contained CLI entrypoint packaged with the skill.src/fitness_agent/: Python implementation for Strava auth, activity fetch, Markdown rendering, and vault writes.scripts/run_fitness_agent.sh: Stable wrapper that dispatches to the packaged CLI.~30 seconds. Free. No account. Every finding cites a rule and a line of evidence.