whoop
Fetches WHOOP health data including recovery scores, sleep metrics, and workouts for detailed fitness analysis.
Install this skill
or
89/100
Security score
The whoop skill was audited on May 29, 2026 and we found 3 security issues across 1 threat category. Review the findings below before installing.
Categories Tested
Security Issues
medium line 14
Access to hidden dotfiles in home directory
SourceSKILL.md
| 14 | Add tokens to `~/.openclaw/openclaw.json`: |
low line 129
Access to hidden dotfiles in home directory
SourceSKILL.md
| 129 | --message "Run {baseDir}/scripts/whoop-refresh.sh and update BOTH WHOOP_ACCESS_TOKEN and WHOOP_REFRESH_TOKEN in ~/.openclaw/openclaw.json with the new tokens from the output. Both tokens rotate on eac |
medium line 143
Access to hidden dotfiles in home directory
SourceSKILL.md
| 143 | Set your token in `~/.openclaw/openclaw.json` - see Setup above. |
Scanned on May 29, 2026
View Security Dashboard