Strava Skill
PassAudited by ClawScan on May 1, 2026.
Overview
This is a transparent instruction-only Strava/Transition API skill, but personalized use requires an API key and lets the agent query your fitness, profile, and chat-history data through Transition.
Install this only if you are comfortable using Transition as the intermediary for your Strava data. Keep the TRANSITION_API_KEY private, revoke it if it is exposed, and review Transition's privacy/retention practices for AI coach chat and activity history.
Findings (2)
Artifact-based informational review of SKILL.md, metadata, install specs, static scan signals, and capability signals. ClawScan does not execute the skill or run runtime probes.
Anyone or any agent process with access to the API key could query the documented Transition endpoints for your Strava-derived data.
The skill uses a Transition API key tied to a Transition account connected to Strava, allowing authenticated access to the user's training data.
export TRANSITION_API_KEY="tr_live_xxxxxxxxxxxxxxxxxxxxx" ... Auth: Pass `X-API-Key` header on every request.
Store the key only in trusted environments, avoid pasting it into chats or logs, revoke it if exposed, and confirm you are comfortable giving Transition access to your Strava data.
Your personal fitness history and prior coach conversations may be used as context for future answers, and the agent may rely on that external context when giving training advice.
The skill relies on external stored or retrieved context about activities, performance, and coach chat history to answer user questions.
The AI coach has full context on your activities and performance ... `https://api.transition.fun/api/v1/coach/history`
Review Transition's privacy and retention practices, avoid sending unnecessary sensitive details, and treat AI training recommendations as guidance rather than a substitute for professional advice.