Is pfrederiksen/whoop-health-analysis safe?
Yes. pfrederiksen/whoop-health-analysis is safe to install. Oathe's behavioral security audit gave the whoop-health-analysis skill by pfrederiksen a trust score of 95/100 with 4 findings, none critical or high.
https://github.com/pfrederiksen/whoop-health-analysis
Is pfrederiksen/whoop-health-analysis safe to install?
This Whoop health analysis skill appears to be a legitimate integration for accessing and analyzing Whoop wearable device data. The skill implements standard OAuth authentication, makes API calls to official Whoop endpoints, and generates health visualizations. While it contains executable code and communicates with external APIs, these behaviors align with its stated functionality and show no signs of malicious intent.
What security issues were found in pfrederiksen/whoop-health-analysis?
Category Scores
Findings (4)
LOW External API Communication -5 ▶
The skill makes legitimate API calls to Whoop's official endpoints for health data retrieval as part of its core functionality.
MEDIUM Executable Python Scripts -10 ▶
The skill contains executable Python scripts that implement OAuth authentication, data fetching, and chart generation functionality.
LOW Local HTTP Server -5 ▶
The OAuth authentication flow starts a local HTTP server on port 9876 for OAuth callback handling, which is standard practice but creates temporary attack surface.
INFO OAuth Scope Access -5 ▶
The skill requests comprehensive Whoop API access scopes including recovery, sleep, workout, and profile data. While legitimate for health analysis, represents broad data access.
Should I install pfrederiksen/whoop-health-analysis?
Oathe's verdict for pfrederiksen/whoop-health-analysis is SAFE with a trust score of 95/100. Recommendation: Install.