Intervals Icu Api

ReviewAudited by ClawScan on May 1, 2026.

Overview

This is a coherent instruction-only Intervals.icu API guide, but it uses user-provided credentials and includes examples that can read, change, or delete training and wellness data.

This skill is reasonable to use if you intend to work with Intervals.icu data. Before installing or using it, be prepared to protect your API key, verify write/delete/bulk commands before they run, use narrow date ranges and field selections, and compare high-impact operations with the official Intervals.icu API docs.

Findings (3)

Artifact-based informational review of SKILL.md, metadata, install specs, static scan signals, and capability signals. ClawScan does not execute the skill or run runtime probes.

What this means

If a real API key or bearer token is shared in chat, logs, or copied into the wrong command, someone else may be able to access the user's Intervals.icu data.

Why it was flagged

The skill requires user-provided Intervals.icu credentials or OAuth tokens to access an athlete account. This is expected for the API integration, but those credentials can grant sensitive account access.

Skill content
Visit [intervals.icu settings](https://intervals.icu/settings) and find:
- Your **Athlete ID**
- Your **API Key** ... curl -H "Authorization: Bearer YOUR_ACCESS_TOKEN"
Recommendation

Use credentials only in trusted sessions, avoid pasting real keys into shared transcripts, revoke keys if exposed, and prefer the least-privileged token method available.

What this means

A mistaken command could alter workouts, wellness records, sport settings, or calendar events in the user's Intervals.icu account.

Why it was flagged

The guide documents API operations that can create, update, bulk-update, or delete account data. These are purpose-aligned for managing training data, but they can have real account impact if run without review.

Skill content
`POST /athlete/{id}/activities/manual` - Create manual activity
`PUT /activity/{id}` - Update activity
`DELETE /athlete/{id}/events/{eventId}` - Delete event
`PUT /athlete/{id}/wellness-bulk` - Bulk update wellness
Recommendation

Review all write, delete, and bulk commands before running them; use narrow date ranges and IDs; keep backups or exports when possible; and verify destructive actions against official API documentation.

What this means

Personal health, recovery, and training notes may become visible to the assistant during use.

Why it was flagged

The skill encourages retrieving sensitive wellness and free-text note data into the assistant's working context. This is aligned with the skill's purpose and no persistence mechanism is shown, but users should limit what they expose.

Skill content
Wellness Fields
- `sleep_secs` - Sleep duration in seconds
- `resting_hr` - Resting heart rate
- `fatigue` - Fatigue level (1-10)
- `soreness` - Soreness level (1-10)
- `notes` - Daily notes
Recommendation

Request only the fields and dates needed for the task, avoid unnecessary wellness notes, and do not reuse retrieved personal data outside the intended analysis.