Back to skill
Skillv1.0.0

VirusTotal security

Strava Python · External malware reputation and Code Insight signals for this exact artifact hash.

Scanner verdict

BenignApr 30, 2026, 3:49 AM
Hash
3bd8a2297985fddc9b0bc6f442f8878717257c4f45331410dd1cd0e80b57879e
Source
palm
Verdict
benign
Code Insight
Type: OpenClaw Skill Name: strava-python Version: 1.0.0 The skill bundle is classified as benign. All files, including SKILL.md and README.md, provide clear and legitimate instructions for setting up and using a Strava API client. The `setup.py` script securely prompts for Strava API credentials and stores them in a local dotfile (`~/.strava_credentials.json`) for use by `strava_control.py`. There is no evidence of data exfiltration, malicious execution, persistence mechanisms, prompt injection against the AI agent, or obfuscation. The requested API scopes are appropriate for the stated purpose of querying Strava activities and stats.
External report
View on VirusTotal