Hevy

Access and analyze your Hevy fitness data via CLI to view workouts, routines, exercises, export JSON data, and track fitness progress.

Security Scan

The SKILL.md describes a Hevy CLI workflow that requires installing a GitHub Go package and setting an API key, but the skill's registry metadata does not declare the required binary or credential — this inconsistency warrants caution.

Purpose & Capability

The skill's runtime instructions clearly target the hevycli command-line tool and a Hevy API key to read a user's workout data. However, the registry metadata declares no required binaries, no required environment variables, and no primary credential. That mismatch (instructions require a binary and API key but metadata lists none) is incoherent.

Instruction Scope

The SKILL.md stays within the stated purpose (listing/getting workouts, routines, templates, exporting JSON). It does instruct the agent/user to run `go install github.com/nsampre/hevycli@latest` and to configure an API key via `hevycli config set-api-key`. It does not ask the agent to read unrelated files or exfiltrate data. Minor caution: using `--debug` may expose request details (potentially including sensitive tokens) in logs.

Install Mechanism

There is no registry install spec (instruction-only), but SKILL.md instructs the user to run `go install` against a GitHub repo. Fetching and building code from a remote repository is normal for Go CLIs but requires trusting that GitHub source — the skill does not provide a vetted install artifact or pinned release in the metadata.

Credentials

The instructions require a Hevy API key and a Hevy Pro subscription, yet the skill metadata declares no credentials or required env vars. The absence of declared credentials is inconsistent and hides that an API key (sensitive secret) must be provided and stored locally by the CLI. The SKILL.md also advises using debug output which could surface sensitive data.

Persistence & Privilege

The skill does not request always:true or any persistent system-wide privileges. It is user-invocable and allows normal autonomous invocation. It does not declare modifying other skills or system configs.

What to consider before installing

Before installing or using this skill: 1) Be aware the SKILL.md expects you to install a third-party Go package (github.com/nsampre/hevycli) — review that repository's source and releases to ensure you trust it. 2) The skill needs your Hevy API key (sensitive). Confirm how `hevycli` stores that key locally and avoid sharing it; do not enable `--debug` unless necessary. 3) The registry metadata is incomplete (it should list the hevycli binary and required credential). Treat this mismatch as a packaging/attention-to-detail problem — it may be harmless, but verify the upstream code and read the CLI's config/storage behavior before providing secrets. 4) If possible, prefer installing a pinned release (not @latest) and inspect the code/build artifacts for unexpected network or file-access behavior.

Hevy CLI Skill

Description

Access and analyze Hevy fitness tracking data including workouts, routines, and exercise templates via the command line.

When to Use

Use this skill when the user asks to:

• View their workout history or recent workouts
• Get details about a specific workout
• Check their total workout count
• List or view their workout routines
• Browse exercise templates
• Export workout data as JSON
• Analyze their fitness progress over time

Prerequisites

• User must have hevycli installed (go install github.com/nsampre/hevycli@latest)
• User must have configured their Hevy API key (hevycli config set-api-key <key>)
• User must have a Hevy Pro subscription

Available Commands

Configuration

# Set API key
hevycli config set-api-key <api-key-uuid>

# View current config
hevycli config show

Workouts

# List recent workouts
hevycli workouts list [--page N] [--page-size N] [--format json|table]

# Get detailed workout information (accepts full UUID or 8-char short ID)
hevycli workouts get <workout-id>

# Get total workout count
hevycli workouts count

Routines

# List routines
hevycli routines list [--page N] [--page-size N] [--format json|table]

# Get routine details (accepts full UUID or 8-char short ID)
hevycli routines get <routine-id>

Exercises

# List exercise templates
hevycli exercises list [--page N] [--page-size N] [--format json|table]

# Get exercise template details
hevycli exercises get <template-id>

Global Flags

• --format - Output format: table (default) or json
• --debug - Enable debug output for API requests

Usage Examples

Example 1: View Recent Workout History

hevycli workouts list --page-size 5

Example 2: Get Detailed Workout with Sets and Reps

# Using short ID (first 8 characters)
hevycli workouts get f75e9c13

# Or using full UUID
hevycli workouts get f75e9c13-32d7-407d-9715-011f5d5698fa

Example 3: Export Data for Analysis

# Export all workouts as JSON
hevycli workouts list --format json > workouts.json

# Export routines
hevycli routines list --format json > routines.json

Example 4: Check Progress

# View total workouts completed
hevycli workouts count

# List exercise templates to find specific exercise IDs
hevycli exercises list

Tips for Claude

1. Use JSON format for analysis: When helping users analyze their data, use --format json to get structured data that can be parsed and analyzed.

2. Short IDs are supported: Users can copy short IDs from workouts list output and use them directly in workouts get commands.

3. Pagination: API max page size is 10. Use pagination (--page N) to access older workouts.

4. Error handling: If a command fails:

   • Check if API key is configured (hevycli config show)
   • Verify the user has Hevy Pro subscription
   • Check if the ID exists or is valid

5. Data insights: After retrieving workout data, you can:

   • Calculate training volume (weight × reps × sets)
   • Track progression over time
   • Identify patterns in workout frequency
   • Suggest rest day intervals

Example Interaction

User: "Show me my last 3 workouts"

Claude:

hevycli workouts list --page-size 3

User: "Get details on the first workout"

Claude:

# Using the short ID from the list output
hevycli workouts get f75e9c13

User: "How many total workouts have I completed?"

Claude:

hevycli workouts count

Notes

• The tool reads data only - it does not create or modify workouts
• All timestamps are in ISO 8601 format
• Weights are always displayed in kilograms
• Distances are in meters, durations in seconds
• Table output handles emoji in workout titles (may have minor alignment issues depending on terminal)