Fit Coord Converter

This skill does what it promises (convert FIT coordinates and optionally upload to Strava), but I recommend caution before installing or enabling it: - Do not trust the hard-coded Strava credentials in the SKILL.md/scripts. They should be removed and replaced by properly declared environment variables (e.g., STRAVA_ACCESS_TOKEN) so you can supply your own token, and the skill metadata should list them. - The skill's runtime instructions automatically process any detected .fit attachment without asking the user first. If you care about privacy or explicit consent for file processing, do not enable or call the skill until the behavior is changed to require user confirmation. - The package uses Python libraries (fitparse, requests) that are not declared; ensure these dependencies are installed from trusted sources in a controlled environment. - Treat the embedded token as potentially compromised: it may belong to someone else or be revoked; do not rely on it for your account. If you want Strava upload, supply your own token and rotate it regularly. - If you proceed, prefer running the included scripts locally (offline) or in a sandbox where you control outgoing network access, and verify the code (especially binary replacement/search logic) on sample files before processing real data. If you want, I can: (a) produce a small checklist to harden this skill (remove embedded secrets, declare env vars, require explicit consent), or (b) show how to modify the SKILL.md to require confirmation before processing and to reference declared env vars for Strava.