Strava MCP

• Analyzed: May 6, 2026, 11:36 AM
• Findings: 1
• Version: 0.1.1
• Hash: ae0fe43d087fd293beefdbdf39039879ed897dffd9979b0fe7f466b5dbf5f2a3
• Source: palm
• External report: View on VirusTotal

Findings (1)

The skill bundle provides documentation and setup instructions for an MCP (Model Context Protocol) server to interface with Strava. It uses the 'strava-mcp-unofficial' package via npx and includes explicit safety guidelines to protect OAuth tokens and sensitive GPS data. No malicious code or suspicious prompt-injection patterns were identified in SKILL.md or _meta.json.