Security audit

TrainingPeaks

Security checks across malware telemetry and agentic risk

Overview

This TrainingPeaks skill does what it advertises, but it handles account-session credentials and private fitness data that users must protect carefully.

Install only if you are comfortable giving the skill access equivalent to your TrainingPeaks web session. Treat the copied cookie and files in ~/.trainingpeaks like passwords, avoid pasting them into shared logs or shell history, and be careful with profile/workout JSON because it can include private health and account details.

SkillSpector

By NVIDIA

Vulnerability Patterns

Data ExfiltrationExternal Transmission, Env Variable Harvesting, File System Enumeration
MCP Least PrivilegeUnderdeclared Capability, Wildcard Permission, Missing Permission Declaration
Prompt InjectionInstruction Override, Hidden Instructions, Exfiltration Commands
Privilege EscalationExcessive Permissions, Sudo/Root Execution, Credential Access
Supply ChainUnpinned Dependencies, External Script Fetching, Obfuscated Code

Findings (4)

Lp3

Medium

Category: MCP Least Privilege
Confidence: 88% confidence
Finding: The skill advertises and instructs use of capabilities including environment variables, local credential storage, shell execution, and network access, yet does not declare any permissions or trust boundaries. That creates a transparency and consent problem: users may invoke a skill that can read/write sensitive files and transmit credentials without an explicit permissions model, increasing the chance of credential mishandling or unintended data exposure.

Missing User Warnings

Medium

Confidence: 96% confidence
Finding: The skill instructs users to manually extract a live authentication cookie from browser developer tools and store it locally or in an environment variable, then exchange it for a bearer token. A session cookie and derived token are highly sensitive account credentials; if exposed through shell history, logs, CI environments, backups, or local compromise, an attacker could access the user's TrainingPeaks account and private fitness data as that user.

Missing User Warnings

Medium

Confidence: 90% confidence
Finding: The script persists a session cookie and bearer token to disk and transmits the cookie to mint tokens, but it does not clearly warn users that long-lived authentication material will be stored locally and sent over the network. In a skill context handling account credentials without an explicit disclosure, users may unknowingly expose access to their TrainingPeaks account if the host is shared, backed up insecurely, or monitored.

Missing User Warnings

Medium

Confidence: 82% confidence
Finding: The profile and workout functionality can print personally identifiable and health-related information such as email, date of birth, weight, gender, FTP values, workout descriptions, coach comments, and athlete comments directly to stdout without any warning or output-safety guard. In agent or shared-terminal environments, this increases the risk of inadvertent disclosure through logs, chat transcripts, shell history context, or other observers.

VirusTotal

63/63 vendors flagged this skill as clean.

View on VirusTotal

Static analysis

No suspicious patterns detected.