wger Fitness Manager

Manage and track gym workouts, routines, nutrition, and progress using the wger API for viewing, creating, updating, and reporting fitness data.

This package appears to be a straightforward wger API helper, but two issues need resolution before you trust it: 1) Metadata vs runtime mismatch: The skill package/registry metadata does not declare WGER_TOKEN, yet both SKILL.md and the included scripts exit if WGER_TOKEN is missing. Treat WGER_TOKEN as a required secret for runtime. Only provide it if you trust the skill and run it in a controlled environment. 2) Missing files referenced in the instructions: SKILL.md mentions scripts and assets (generate_report.py, set_goal.py, edit_log.py, references/nutrition.md, assets/progress_template.html) that are not present. Ask the publisher for the full bundle or updated documentation before relying on automation. Missing files could mean the skill is incomplete or the instructions were copied from another project. Practical steps: - Inspect the two included scripts locally (they are short and only call the wger API) and run them in an isolated environment first. - Only set WGER_TOKEN as an env var in a restricted environment or use a short-lived token if wger supports it. - Request the missing files or a corrected package from the publisher; decline installing until the manifest, docs, and runtime requirements match. If the publisher provides a corrected package where required env vars and referenced files are present and accurate, the skill would look benign. As-is, the inconsistencies warrant caution.

Type: OpenClaw Skill Name: wger-fitness Version: 1.3.0 The wger-fitness skill is a legitimate integration for the wger open-source fitness platform, allowing users to manage workouts and nutrition via API. The bundle includes Python scripts (scripts/create_log.py, scripts/view_logs.py) that use the requests library to interact with the official wger API (wger.de) using an environment-stored token. The documentation (SKILL.md, references/api_endpoints.md) provides clear instructions and examples for the AI agent that are strictly aligned with fitness tracking. No evidence of malicious intent, data exfiltration, or unauthorized execution was found.