Skills/ClawHub/speediance

speediance@1.0.7

CAUTION· install only

Publisher claims: "Read completed workouts (summaries and full per-set detail), browse and export the exercise catalog, and push custom training programs to your Speediance (Gym Monster) smart cable machine via its cloud API. Authenticates with your account credentials, caches a session token in your OS user-cache directory (override with an exported SPEEDIANCE_TOKEN_CACHE), and makes outbound HTTPS requests to the Speediance cloud API. Reads and emits structured data. It writes local files only in these cases: the session token cache; config.json when you run `config set`, which stores the value you give it (including a password) as plain JSON with owner-only permissions; and the exercise catalog that the `library` command saves (default library.json). Ships as a single static binary — no Python or other runtime required. Use when the user asks for their Speediance or Gym Monster workout data, wants to look up exercises, or wants to create a training program on the machine." Observed in sandbox: no network, touches nothing outside the project, writes no memory.

Registry ClawHubPublisher stozo04 · publishing for 131 daysInstalls 902Last detonated 3d ago
What would fix thisWatchDispute verdict

Coverage

Nothing executable in the bundle ran; the trace covers the install step only.
Tested
every file read, file written and host contacted by what ran
Not tested
use of the skill by an agent

Is [email protected] safe to install?

KillerSkills ran it in the KillerSkills honeypot sandbox (1 scenario; nothing executable in the bundle ran; the trace covers the install step only) on 2026-11-11 and scored it 78/100 (Caution). It is not known to be malicious, but it has behaviour or code a security policy should decide on before install. Notable findings: Access to sensitive file paths; Access to sensitive file paths; Access to sensitive file paths. Summary: no network, touches nothing outside the project, writes no memory.

Behavior trace

Honeypot run · 0 s · 1 scenarios · 0 deviations
t+CategoryObserved action
0.0sprocessno install scripts in bundle
0.0sprocessscript backend runs setup only
0.0sprocessscript backend runs setup only
0.0sprocessno install scripts to re-run

Static findings

HIGH
Access to sensitive file pathsSKILL.md:21 · Access to sensitive file paths — SSH keys, AWS credentials, env files, or system files- ".env — optional env file in the working directory; only the documented SPEEDIANCE_* keys are read (parsed to a map, never exported into the process environment)"Fix: Stop enumerating or reading credential locations; take secrets from a declared environment variable the user sets on purpose.
AST05
HIGH
Access to sensitive file pathsinternal/config/config.go:116 · Access to sensitive file paths — SSH keys, AWS credentials, env files, or system files// .env still act as the env layer. A missing/unreadable .env yields a nil mapFix: Stop enumerating or reading credential locations; take secrets from a declared environment variable the user sets on purpose.
AST05
HIGH
Access to sensitive file pathsinternal/config/config_test.go:273 · Access to sensitive file paths — SSH keys, AWS credentials, env files, or system files// A .env in CWD is auto-loaded and beats config.json (it's the env layer).Fix: Stop enumerating or reading credential locations; take secrets from a declared environment variable the user sets on purpose.
AST05
HIGH
Access to sensitive file pathsinternal/config/config.go:110 · Access to sensitive file paths — SSH keys, AWS credentials, env files, or system files// key in .env into the live process environment, including unrelated andFix: Stop enumerating or reading credential locations; take secrets from a declared environment variable the user sets on purpose.
AST05
HIGH
Access to sensitive file pathsSKILL.md:107 · Access to sensitive file paths — SSH keys, AWS credentials, env files, or system filesYou can also put these variables in a gitignored **`.env`** file in the working directory — theFix: Stop enumerating or reading credential locations; take secrets from a declared environment variable the user sets on purpose.
AST05
HIGH
Access to sensitive file pathsSKILL.md:319 · Access to sensitive file paths — SSH keys, AWS credentials, env files, or system files- **Secrets**: `config.json`, `.token.json`, `.env` are gitignored — never commit them.Fix: Stop enumerating or reading credential locations; take secrets from a declared environment variable the user sets on purpose.
AST05
HIGH
Access to sensitive file pathsinternal/config/config_test.go:275 · Access to sensitive file paths — SSH keys, AWS credentials, env files, or system filesif err := os.WriteFile(filepath.Join(dir, ".env"),Fix: Stop enumerating or reading credential locations; take secrets from a declared environment variable the user sets on purpose.
AST05
HIGH
Access to sensitive file pathsinternal/config/config_test.go:272 · Access to sensitive file paths — SSH keys, AWS credentials, env files, or system filesclearEnv(t) // ensures no real SPEEDIANCE_* var masks the .env-supplied value.Fix: Stop enumerating or reading credential locations; take secrets from a declared environment variable the user sets on purpose.
AST05
HIGH
Access to sensitive file pathsCLAUDE.md:64 · Access to sensitive file paths — SSH keys, AWS credentials, env files, or system filesroaming base, a `.env` mutating the process env, an advertised-but-unwired key, …). TheyFix: Stop enumerating or reading credential locations; take secrets from a declared environment variable the user sets on purpose.
AST05
HIGH
Access to sensitive file pathsCLAUDE.md:25 · Access to sensitive file paths — SSH keys, AWS credentials, env files, or system files`.env` no-inject, …) live in `.claude/CLI_CONVENTIONS.md`, committed **byte-identical**Fix: Stop enumerating or reading credential locations; take secrets from a declared environment variable the user sets on purpose.
AST05
HIGH
Access to sensitive file pathsinternal/config/config_test.go:285 · Access to sensitive file paths — SSH keys, AWS credentials, env files, or system filest.Errorf("email = %q, want [email protected] (.env over file)", cfg.Email)Fix: Stop enumerating or reading credential locations; take secrets from a declared environment variable the user sets on purpose.
AST05
HIGH
Access to sensitive file pathsCLAUDE.md:10 · Access to sensitive file paths — SSH keys, AWS credentials, env files, or system filesresolution, environment/`.env` loading, file writes, network calls, loggingFix: Stop enumerating or reading credential locations; take secrets from a declared environment variable the user sets on purpose.
AST05
HIGH
Access to sensitive file pathsAGENTS.md:36 · Access to sensitive file paths — SSH keys, AWS credentials, env files, or system files**`.env`** file in the working directory is read automatically for these `SPEEDIANCE_*`Fix: Stop enumerating or reading credential locations; take secrets from a declared environment variable the user sets on purpose.
AST05
HIGH
Access to sensitive file pathsinternal/config/config.go:113 · Access to sensitive file paths — SSH keys, AWS credentials, env files, or system files// a stray or hostile .env could escalate into the tool's runtime. godotenv.ReadFix: Stop enumerating or reading credential locations; take secrets from a declared environment variable the user sets on purpose.
AST05
HIGH
Access to sensitive file pathsinternal/config/skill_doc_test.go:54 · Access to sensitive file paths — SSH keys, AWS credentials, env files, or system files// config.json and the working-directory .env read unadvertised.Fix: Stop enumerating or reading credential locations; take secrets from a declared environment variable the user sets on purpose.
AST05
HIGH
Access to sensitive file pathsSKILL.md:110 · Access to sensitive file paths — SSH keys, AWS credentials, env files, or system filesignored, so a stray `.env` can never inject unrelated variables into the process environment.Fix: Stop enumerating or reading credential locations; take secrets from a declared environment variable the user sets on purpose.
AST05
HIGH
Access to sensitive file pathsinternal/config/config.go:106 · Access to sensitive file paths — SSH keys, AWS credentials, env files, or system files// Parse a .env file from the working directory WITHOUT mutating the processFix: Stop enumerating or reading credential locations; take secrets from a declared environment variable the user sets on purpose.
AST05
HIGH
Access to sensitive file pathsAGENTS.md:161 · Access to sensitive file paths — SSH keys, AWS credentials, env files, or system files- **Secrets:** `config.json`, `.token.json`, `.env` are gitignored. Never commit them.Fix: Stop enumerating or reading credential locations; take secrets from a declared environment variable the user sets on purpose.
AST05
HIGH
Access to sensitive file pathsinternal/config/config_test.go:175 · Access to sensitive file paths — SSH keys, AWS credentials, env files, or system files// the global precedence contract (flags > env > .env > file > defaults).Fix: Stop enumerating or reading credential locations; take secrets from a declared environment variable the user sets on purpose.
AST05
HIGH
Access to sensitive file pathsAGENTS.md:38 · Access to sensitive file paths — SSH keys, AWS credentials, env files, or system filesof being exported. Only the `SPEEDIANCE_*` keys are read from `.env`; the file is parsedFix: Stop enumerating or reading credential locations; take secrets from a declared environment variable the user sets on purpose.
AST05
HIGH
Access to sensitive file pathsAGENTS.md:37 · Access to sensitive file paths — SSH keys, AWS credentials, env files, or system fileskeys (real exported variables take precedence over it), so they can live in `.env` insteadFix: Stop enumerating or reading credential locations; take secrets from a declared environment variable the user sets on purpose.
AST05
HIGH
Access to sensitive file pathsinternal/config/skill_doc_test.go:83 · Access to sensitive file paths — SSH keys, AWS credentials, env files, or system filesfor _, want := range []string{"config.json", "token", "plan", ".env"} {Fix: Stop enumerating or reading credential locations; take secrets from a declared environment variable the user sets on purpose.
AST05
HIGH
Hidden zero-width characters detectedlibrary.json:2254 · Hidden zero-width characters detected — may conceal content"name": "​Supine Barbell High Cable Biceps Curl",Fix: Keep SKILL.md to visible, descriptive text. Remove comments and encoded text that address the agent.
AST07
HIGH
Hidden zero-width characters detectedlibrary.json:2194 · Hidden zero-width characters detected — may conceal content"name": "​Half-Kneeling Single-Arm Preacher Curl​",Fix: Keep SKILL.md to visible, descriptive text. Remove comments and encoded text that address the agent.
AST07
MEDIUM
File permission modification commandinternal/auth/tokencache.go:71 · File permission modification command — agent changes file ownership/permissions// Ignored on platforms (Windows) where chmod is unsupported.Fix: Request the narrowest permission that works; replace wildcards with the exact paths or hosts.
AST05
HIGH
Access to sensitive file pathsinternal/config/skill_doc_test.go:82 · Access to sensitive file paths — SSH keys, AWS credentials, env files, or system files// working-directory .env (godotenv.Read in internal/config).Fix: Stop enumerating or reading credential locations; take secrets from a declared environment variable the user sets on purpose.
AST05
HIGH
Hidden zero-width characters detectedlibrary.json:2362 · Hidden zero-width characters detected — may conceal content"name": "​Supine Barbell Overhand Biceps Curl",Fix: Keep SKILL.md to visible, descriptive text. Remove comments and encoded text that address the agent.
AST07
HIGH
Hidden zero-width characters detectedlibrary.json:2284 · Hidden zero-width characters detected — may conceal content"name": "​Standing Single-Arm Horizontal Triceps Extension",Fix: Keep SKILL.md to visible, descriptive text. Remove comments and encoded text that address the agent.
AST07
MEDIUM
File permission modification commandinternal/auth/tokencache.go:53 · File permission modification command — agent changes file ownership/permissions// must not fail the command, so chmod errors are ignored (best-effort), againFix: Request the narrowest permission that works; replace wildcards with the exact paths or hosts.
AST05

Cost to the agent

Instructions loaded
≈7,280 tok
3 files · 49 in bundle

Tokens estimated at four characters each. Skills load their instruction text when triggered; the figure is what that costs.

Known vulnerabilities

Vulnerability advisories (OSV) cover npm and PyPI packages; this registry has no advisory database.

What would make this Verified

2 points to 80 · weights: behavior 45%, static 25%, prompt 15%, publisher 15%
  1. Unclaimed publisher≈ +8 on the totalClaim stozo04: a verified publisher gets +50 on publisher trust. It is free and usually instant with GitHub sign-in.
  2. Access to sensitive file paths≈ +4 on the totalStop enumerating or reading credential locations; take secrets from a declared environment variable the user sets on purpose.
  3. Hidden zero-width characters detected≈ +4 on the totalKeep SKILL.md to visible, descriptive text. Remove comments and encoded text that address the agent.
  4. File permission modification command≈ +2 on the totalRequest the narrowest permission that works; replace wildcards with the exact paths or hosts.
Publish a new version to ClawHub, then queue it here. Not your skill? Claim the handle to get verdict changes by email.Claim stozo04Propose a patch to the maintainer