Workout

AdvisoryAudited by Static analysis on Apr 30, 2026.

Overview

No suspicious patterns detected.

Findings (0)

Artifact-based informational review of SKILL.md, metadata, install specs, static scan signals, and capability signals. ClawScan does not execute the skill or run runtime probes.

What this means

If used incorrectly, the agent could remove or alter workout records or profiles.

Why it was flagged

The skill documents commands that can delete profiles, delete logged sets, or discard a session. These actions are purpose-aligned for a workout tracker, but they can change or remove user data.

Skill content
workout profile delete old; workout delete bench-press 3; workout cancel
Recommendation

Confirm destructive or corrective actions such as profile deletion, set deletion, or session cancellation before allowing the agent to run them.

What this means

The safety of actual command execution depends on the installed 'workout' CLI, which is outside this instruction-only artifact.

Why it was flagged

The skill depends on a local 'workout' binary, but the supplied artifacts do not provide provenance or installation details for that binary.

Skill content
Source: unknown; Homepage: none; Required binaries: workout; No install spec
Recommendation

Use this skill only with a 'workout' binary you installed intentionally from a trusted source.

What this means

Workout history, profile names, and notes may contain personal fitness or health-related information.

Why it was flagged

The skill persists and retrieves personal workout data and notes by profile. This is expected for the stated purpose, but users should recognize that fitness history and notes may be stored and reused for later analysis.

Skill content
Per-user data: Templates, workouts, config are per-profile; workout note "Session note"; workout history bench-press
Recommendation

Avoid entering sensitive medical details in workout notes unless you are comfortable storing them in the local workout CLI data.