fitness-nutrition
Provides a comprehensive gym workout planner and nutrition tracker, utilizing free APIs for exercises and food data.
Install this skill
Security score
The fitness-nutrition skill was audited on May 23, 2026 and we found 18 security issues across 3 threat categories. Review the findings below before installing.
Categories Tested
Security Issues
Template literal with variable interpolation in command context
| 114 | ```bash |
Template literal with variable interpolation in command context
| 128 | ```bash |
Template literal with variable interpolation in command context
| 149 | ```bash |
Template literal with variable interpolation in command context
| 168 | ```bash |
Template literal with variable interpolation in command context
| 190 | ```bash |
Curl to non-GitHub URL
| 118 | curl -s "https://wger.de/api/v2/exercise/search/?term=${ENCODED}&language=english&format=json" \ |
Curl to non-GitHub URL
| 131 | curl -s "https://wger.de/api/v2/exerciseinfo/${EXERCISE_ID}/?format=json" \ |
Curl to non-GitHub URL
| 153 | curl -s "https://wger.de/api/v2/exercise/?${FILTER}&language=2&status=2&limit=20&format=json" \ |
Curl to non-GitHub URL
| 173 | curl -s "https://api.nal.usda.gov/fdc/v1/foods/search?api_key=${API_KEY}&query=${ENCODED}&pageSize=5&dataType=Foundation,SR%20Legacy" \ |
Curl to non-GitHub URL
| 194 | curl -s "https://api.nal.usda.gov/fdc/v1/food/${FDC_ID}?api_key=${API_KEY}" \ |
External URL reference
| 23 | help: "Get one free at https://fdc.nal.usda.gov/api-key-signup/ — or skip to use DEMO_KEY with lower rate limits" |
External URL reference
| 35 | - **wger** (https://wger.de/api/v2/) — open exercise database, 690+ exercises with muscles, equipment, images. Public endpoints need zero authentication. |
External URL reference
| 36 | - **USDA FoodData Central** (https://api.nal.usda.gov/fdc/v1/) — US government nutrition database, 380,000+ foods. `DEMO_KEY` works instantly; free signup for higher limits. |
External URL reference
| 118 | curl -s "https://wger.de/api/v2/exercise/search/?term=${ENCODED}&language=english&format=json" \ |
External URL reference
| 131 | curl -s "https://wger.de/api/v2/exerciseinfo/${EXERCISE_ID}/?format=json" \ |
External URL reference
| 153 | curl -s "https://wger.de/api/v2/exercise/?${FILTER}&language=2&status=2&limit=20&format=json" \ |
External URL reference
| 173 | curl -s "https://api.nal.usda.gov/fdc/v1/foods/search?api_key=${API_KEY}&query=${ENCODED}&pageSize=5&dataType=Foundation,SR%20Legacy" \ |
External URL reference
| 194 | curl -s "https://api.nal.usda.gov/fdc/v1/food/${FDC_ID}?api_key=${API_KEY}" \ |