Trainer Buddy Pro

What to consider before installing: - The core functionality appears coherent and local-only by default (no env vars, no required binaries). That matches the README/SECURITY claims in normal use. - Do NOT run the included backup script (scripts/backup-workout-data.sh) without first opening it in an editor. The script contains broken/garbled lines in its root-detection routine; that looks like accidental corruption and could cause errors. If you need the backup behavior, fix or rewrite the function or only copy its non-problematic logic. - Be aware the package contains a dashboard kit and SQL/schema files which describe an optional cloud mode (Supabase). Enabling that will require external credentials and network access — those are not required by default and are not declared by the skill. Only opt into cloud sync if you understand and trust the destination and supply credentials yourself. - The SKILL.md includes prompt-injection defenses (good). Still, treat any external content (OCR text, pasted workouts) as untrusted and avoid blindly executing any shell commands found in uploaded content. - Practical steps: (1) Review scripts and SETUP-PROMPT.md locally before running any install commands; (2) keep skill data directory permissions tight (as recommended); (3) do initial testing in a sandboxed workspace or container; (4) if you do enable dashboard/cloud sync, provide only minimal credentials and monitor network activity. If you want, I can: (A) show the exact lines in the backup script that are malformed and suggest a corrected version, or (B) point out the places in SKILL.md/dashboard files where optional cloud sync would be enabled so you can audit them before use.