strava
Pass
Audited by Gen Agent Trust Hub on Sep 23, 2026
Risk Level: SAFECOMMAND_EXECUTIONEXTERNAL_DOWNLOADSINDIRECT_PROMPT_INJECTION
Full Analysis
- [COMMAND_EXECUTION]: The skill instructs the agent to execute shell commands using
npx @useclawlink/clito manage authentication and perform data operations on Strava. - [EXTERNAL_DOWNLOADS]: Downloads the
@useclawlink/clipackage from the NPM registry to perform tasks. This is a standard dependency for the skill's functionality. - [INDIRECT_PROMPT_INJECTION]: The skill processes natural language descriptions and JSON input from the user to identify and execute specific Strava actions.
- Ingestion points: Command-line arguments for action descriptions and JSON input strings.
- Boundary markers: None explicitly defined in the provided instructions.
- Capability inventory: Shell command execution via
npx. - Sanitization: Handled by the underlying CLI tool during parameter parsing.
Audit Metadata