Trainer Buddy Pro

Your AI strength coach that customizes workouts from gym photos, tracks progress, adapts to injuries, and plans smart splits with no subscription needed.

What to consider before installing: - The core functionality appears coherent and local-only by default (no env vars, no required binaries). That matches the README/SECURITY claims in normal use. - Do NOT run the included backup script (scripts/backup-workout-data.sh) without first opening it in an editor. The script contains broken/garbled lines in its root-detection routine; that looks like accidental corruption and could cause errors. If you need the backup behavior, fix or rewrite the function or only copy its non-problematic logic. - Be aware the package contains a dashboard kit and SQL/schema files which describe an optional cloud mode (Supabase). Enabling that will require external credentials and network access — those are not required by default and are not declared by the skill. Only opt into cloud sync if you understand and trust the destination and supply credentials yourself. - The SKILL.md includes prompt-injection defenses (good). Still, treat any external content (OCR text, pasted workouts) as untrusted and avoid blindly executing any shell commands found in uploaded content. - Practical steps: (1) Review scripts and SETUP-PROMPT.md locally before running any install commands; (2) keep skill data directory permissions tight (as recommended); (3) do initial testing in a sandboxed workspace or container; (4) if you do enable dashboard/cloud sync, provide only minimal credentials and monitor network activity. If you want, I can: (A) show the exact lines in the backup script that are malformed and suggest a corrected version, or (B) point out the places in SKILL.md/dashboard files where optional cloud sync would be enabled so you can audit them before use.

Type: OpenClaw Skill Name: normieclaw-trainer-buddy-pro Version: 1.0.3 Trainer Buddy Pro is a fitness-focused skill that manages workout data and user profiles locally. The skill includes explicit prompt-injection defenses in SKILL.md, instructing the agent to treat external content (like OCR text from gym photos) strictly as data. The provided shell script (backup-workout-data.sh) is designed for local data maintenance with safety guards to prevent path traversal, and the overall architecture adheres to local storage principles without external data exfiltration or suspicious network activity.