Apple Health Skill

ReviewAudited by ClawScan on May 1, 2026.

Overview

This instruction-only skill is coherent for querying Apple Health data through Transition, but it requires a personal API key and gives an external AI service access to sensitive health information.

This looks like a purpose-aligned instruction-only skill. Before installing, be comfortable sharing Apple Health-derived data with Transition, protect the TRANSITION_API_KEY, and verify any GitHub source you clone matches the reviewed skill.

Findings (3)

Artifact-based informational review of SKILL.md, metadata, install specs, static scan signals, and capability signals. ClawScan does not execute the skill or run runtime probes.

What this means

Anyone using this skill for personal health questions should expect the agent to use a Transition API key that can access their synced health and fitness data.

Why it was flagged

Personalized use requires granting Transition access to Apple Health and giving the agent/API a Transition API key. This is expected for the skill, but it is sensitive account and health-data authority.

Skill content
Download [Transition](https://www.transition.fun) and grant Apple Health access ... export TRANSITION_API_KEY="tr_live_xxxxxxxxxxxxxxxxxxxxx"
Recommendation

Only use this with a trusted Transition account, keep the API key private, revoke it if no longer needed, and grant the minimum Apple Health permissions you are comfortable sharing.

What this means

Health metrics and coach conversations may be available through the Transition service, so sensitive information could be exposed to anyone with the API key.

Why it was flagged

The skill documents an AI coach with broad health context and a chat-history endpoint. That suggests health-related context and prior conversations may be retrievable through the provider.

Skill content
The AI coach has full context on your workouts and health metrics ... ### Chat History
Recommendation

Review Transition's privacy and retention practices, avoid including unnecessary personal details in coach messages, and protect or rotate the API key.

What this means

Installing directly from a repository could bring in changed or unreviewed files if the repository differs from the reviewed artifact.

Why it was flagged

The README recommends a user-directed clone from an external GitHub repository. The evaluated artifact itself has no executable code, but users should ensure the repository content matches what they intend to install.

Skill content
git clone https://github.com/nftechie/apple-health-skill.git ~/.claude/skills/apple-health-skill
Recommendation

Install from a trusted source and inspect the repository contents before placing it in a skills directory.