Apple Health Skill
v1.0.0Talk to your Apple Health data — ask questions about your workouts, heart rate, activity rings, and fitness trends using AI.
⭐ 3· 2.3k·12 current·13 all-time
MIT-0
Download zip
LicenseMIT-0 · Free to use, modify, and redistribute. No attribution required.
Security Scan
OpenClaw
Suspicious
high confidencePurpose & Capability
The skill's stated purpose (query Apple Health data via Transition) matches the runtime instructions (calls to api.transition.fun). However the registry metadata lists no required environment variables or primary credential while SKILL.md and README explicitly instruct setting TRANSITION_API_KEY. That metadata omission is an incoherence and could mislead users about required secrets.
Instruction Scope
SKILL.md stays on-purpose: it tells agents to call Transition endpoints for workouts, coach chat, performance stats, etc. Important: using the authenticated endpoints will cause the agent/service to send the user's Apple Health data to api.transition.fun (Transition) — this is expected for the skill's function but is a significant data-sharing action the user must approve.
Install Mechanism
This is an instruction-only skill with no install spec or code files, so nothing is written to disk by the skill itself. Lower install risk.
Credentials
The skill requires a sensitive API key (TRANSITION_API_KEY) to access personalized Apple Health data, but the registry's requires.env and primary credential fields are empty. Requiring a key that isn't declared in metadata is disproportionate / inconsistent and reduces transparency. The requested key, if supplied, grants access to personal health data via the third-party API.
Persistence & Privilege
The skill does not request always:true and has no install hooks or system-wide changes. It does not ask to modify other skills or system configs. Agent autonomous invocation is allowed (platform default) but not an additional privilege granted by this skill.
What to consider before installing
Before installing, be aware: the SKILL.md requires you to generate and set a TRANSITION_API_KEY (sensitive) and to grant the Transition app access to your Apple Health data — that data will be accessible to api.transition.fun. The registry metadata failing to list the required env var is an inconsistency you should question. Actions to consider: verify the skill's publisher and source (the README suggests a GitHub repo and a transition.fun homepage), read Transition's privacy/security policy, decide whether you trust this third party with health data, use a separate account or scoped key if possible, rotate/revoke the key after use, and refuse installation if the metadata or provenance cannot be confirmed.Like a lobster shell, security has layers — review code before you run it.
latestvk97d1yqrs3zw417cfaf8hjhf9980trx9
License
MIT-0
Free to use, modify, and redistribute. No attribution required.