trainedby.ai MCP

v1.0.1

Use the trainedby.ai MCP server for personal coaching, health tracking, and goal management. Trigger when the user asks about their health data, fitness goal...

0· 254·0 current·0 all-time
byJoost Rothweiler@joostrothweiler
MIT-0
Download zip
LicenseMIT-0 · Free to use, modify, and redistribute. No attribution required.
Security Scan
VirusTotalVirusTotal
Benign
View report →
OpenClawOpenClaw
Benign
medium confidence
Purpose & Capability
Name and description (personal coaching, health tracking) match the SKILL.md: it instructs the agent to use an external MCP server and lists timeline/search/save tools that are coherent with coaching and goal management.
Instruction Scope
Instructions remain within the claimed scope (get_timeline, search, save_note, get_onboarding, etc.). They do instruct the agent to connect to an external URL (https://trainedby.fastmcp.app/mcp) and to perform OAuth sign-in. The SKILL.md is light on low-level details (exact API endpoints, token handling, what user data is sent), so it relies on platform tooling and the external service to implement the calls — this is functional but a bit vague about data flows.
Install Mechanism
No install spec and no code files — instruction-only skill. Nothing is written to disk or downloaded by the skill itself, which is the lowest-risk installation profile.
Credentials
The skill declares no required environment variables, no config paths, and no primary credential. The only credentialing mentioned is Supabase OAuth (user-driven sign-in), which is appropriate for an external coaching service handling personal data.
Persistence & Privilege
always is false and there are no special privileges requested. The skill does not request to modify other skills or system settings.
Assessment
This skill appears coherent for a personal coaching integration, but exercise standard caution: the skill directs the agent to an external domain (https://trainedby.fastmcp.app/mcp) and will require you to sign in via Supabase OAuth — that external service will have access to your timeline/health data. Before installing or enabling it, verify you trust the trainedby/fastmcp domain (look for an official privacy policy, terms, or known vendor), and ask how data is stored and shared. If you have sensitive health data you do not want sent to third-party services, do not enable the skill. If you want higher assurance, request the skill author provide an API spec and a privacy/security statement or prefer a skill published by a verified/homepage-listed author.

Like a lobster shell, security has layers — review code before you run it.

latestvk9765efsbxpb2xf9grm40h2xkn826x82

License

MIT-0
Free to use, modify, and redistribute. No attribution required.

Comments