Running Coach

基于全频训练法为跑者生成和管理训练计划，支持自动同步到Intervals.icu并提供配速区间指导。

This skill appears to do what it says (generate weekly running plans and POST them to intervals.icu) and the code is small and readable. The main issue is metadata: the registry did not declare the environment variables the code and SKILL.md require (INTERVALS_API_KEY, INTERVALS_ATHLETE_ID, optionally INTERVALS_THRESHOLD_PACE). Before installing or granting access: 1) Verify and supply an Intervals.icu API key and Athlete ID only via environment variables or a config file you control (avoid pasting keys into third-party UIs). 2) Run the included script locally first with --dry-run to confirm behavior: python3 weekly_plan.py --dry-run --config config.json. 3) Inspect weekly_plan.py yourself (it only contacts https://intervals.icu/api/v1) and confirm network calls are limited to that host. 4) Use a least-privilege API key if Intervals.icu supports scoping, or be prepared to rotate/regenerate the key after testing. 5) If you rely on automated permission checks, request the publisher to update the package metadata to declare required env vars and primary credential so permissions are explicit. These steps will reduce the risk posed by the metadata omission.

Type: OpenClaw Skill Name: runningcoach Version: 1.0.1 The 'Running Coach' skill bundle is a legitimate tool designed to manage and sync running training plans with the Intervals.icu platform. The core logic in 'weekly_plan.py' uses standard Python libraries to interact with the service's API, and the documentation in 'SKILL.md' provides clear instructions for users to configure their own API credentials securely via environment variables or a local configuration file. No evidence of malicious intent, data exfiltration to unauthorized endpoints, or prompt injection was found.