Coach Skill

• Outcome: Review
• Latest audit: Jul 10, 2026 · 2:31 AM UTC
• Version: 1.0.0

Overview

This is a coherent endurance-coaching skill, but it asks users to share sensitive Strava OAuth material in chat, so it should be reviewed before installation.

Install only if you are comfortable with Strava account linking and local storage of detailed fitness history. Prefer manual entry or a safer OAuth flow if available, and do not paste a Strava Client Secret or full OAuth redirect URL into ordinary chat unless you accept transcript/log exposure risk. Treat the training and nutrition outputs as coaching suggestions, not medical advice.

SkillSpector

By NVIDIA

Vulnerability Patterns

• Data Exfiltration: External Transmission, Env Variable Harvesting, File System Enumeration
• Privilege Escalation: Excessive Permissions, Sudo/Root Execution, Credential Access
• Rogue Agent: Self-Modification, Session Persistence
• Prompt Injection: Instruction Override, Hidden Instructions, Exfiltration Commands
• Supply Chain: Unpinned Dependencies, External Script Fetching, Obfuscated Code

Findings (9)

Missing User Warnings

High

• Confidence: 98% confidence
• Finding: The skill explicitly asks the user to paste a Strava Client Secret into plain conversation, which exposes a long-lived credential to the model, logs, and any downstream systems handling chat transcripts. Even if intended for OAuth setup, collecting secrets through conversational channels is unsafe and unnecessary when a proper authorization flow or local-only input mechanism should be used.

Missing User Warnings

Medium

• Confidence: 92% confidence
• Finding: The skill directs syncing up to two years of Strava activity history and storing it locally, but does not clearly disclose the sensitivity, retention, and scope of the collected data before collection. Training history can reveal location patterns, routines, health-related metrics, and other personal behavioral data, so collecting it without clear user-facing privacy notice and minimization is risky.

Missing User Warnings

Medium

• Confidence: 92% confidence
• Finding: This section gives concrete minimum training times, peak weekly volumes, and long-session targets for marathon and triathlon events, which can be physically risky if applied without screening for age, injury history, cardiovascular risk, heat conditions, or current fitness. Although some earlier text mentions validating with the athlete and being cautious after injury, the cited event-specific guidance lacks a clear user-facing safety disclaimer or recommendation to individualize based on medical status and seek professional evaluation where appropriate.

Missing User Warnings

Medium

• Confidence: 94% confidence
• Finding: This section gives detailed, prescriptive fueling, hydration, sodium, heart-rate, and caffeine guidance without clear safety limitations or advice to individualize based on medical conditions, heat tolerance, body size, medications, or clinician guidance. In a coaching skill, users may treat these numbers as authoritative and apply them despite contraindications, which can contribute to dehydration, hyponatremia, GI distress, overexertion, or other health complications.

Missing User Warnings

Medium

• Confidence: 91% confidence
• Finding: The referenced section presents an advanced VO2max swim workout labeled only as 'advanced' but does not include screening criteria, contraindications, or warnings about cardiovascular, fatigue, or overuse risk. In a coaching skill that may be used by unverified users of varying fitness and medical status, this can lead users to attempt unsafe high-intensity training without adequate progression or supervision.

Missing User Warnings

Medium

• Confidence: 95% confidence
• Finding: The file gives structured maximal-effort field testing protocols for running, cycling, and swimming, including 'hardest sustainable pace,' 'maximum sustainable power,' and 'all-out' time trials, but provides no screening, contraindications, or advice to stop if symptoms occur. In a coaching skill, users may treat this as actionable fitness guidance, so omission of basic safety warnings can increase risk of overexertion, injury, or cardiovascular events in inexperienced or higher-risk athletes.

Ssd 3

High

• Confidence: 99% confidence
• Finding: The skill instructs the agent to solicit highly sensitive OAuth materials in plain conversation, including client secrets and full redirect URLs that may contain authorization codes or other security-relevant parameters. Handling these values in chat creates direct credential-exposure risk via transcript retention, accidental disclosure, replay, or misuse by other tools or agents.

Credential Access

High

• Category: Privilege Escalation

Content

This will:

1. Exchange the code for access tokens
2. Fetch 2 years of activity history
3. Store everything in `~/.claude-coach/coach.db`

• Confidence: 90% confidence
• Finding: access tokens

Session Persistence

Medium

• Category: Rogue Agent

Content

---
name: coach
description: Create personalized triathlon, marathon, and ultra-endurance training plans. Use when athletes ask for training plans, workout schedules, race preparation, or coaching advice. Can sync with Strava to analyze training history, or work from manually provided fitness data. Generates periodized plans with sport-specific workouts, zones, and race-day strategies.
---

# Claude Coach: Endurance Training Plan Skill

• Confidence: 78% confidence
• Finding: Create personalized triathlon, marathon, and ultra-endurance training plans. Use when athletes ask for training plans, workout schedules, race preparation, or coaching advice. Can sync with Strava to

VirusTotal

66/66 vendors flagged this skill as clean.

Static analysis

No suspicious patterns detected.