Strava CLI

Interact with Strava via the strava-client-cli Python tool. Use for viewing activities, athlete profiles, stats, and exporting data. Covers setup (creating a Strava account, API app, and OAuth) and all CLI commands.

This skill is a set of instructions for using the third‑party strava-client-cli tool and appears consistent with that purpose. Before installing or running it: (1) verify the referenced project (https://github.com/geodeterra/strava-cli or the pip package) is the official/trusted source and review its code if possible; (2) be aware OAuth tokens and refresh tokens will be stored at ~/.config/strava-cli/tokens.json — treat these files as sensitive and revoke the app in Strava if you stop using it; (3) the manual curl exchange requires your Client Secret — don’t paste that into untrusted places; (4) consider running the tool in an isolated environment (container or VM) if you are unsure about the third‑party binary. The only minor mismatch: the skill metadata declares no config paths while the instructions reference token/config file locations — not harmful, but worth noting.

Type: OpenClaw Skill Name: strava-cli Version: 0.1.0 The skill provides instructions for installing and using a legitimate Strava CLI tool. All commands and setup steps, including OAuth authentication via `curl` to `https://www.strava.com/oauth/token` and saving tokens to `~/.config/strava-cli/tokens.json`, are standard and necessary for the tool's intended functionality. There is no evidence of malicious intent, data exfiltration to unauthorized endpoints, persistence mechanisms, or prompt injection attempts in SKILL.md.