安全扫描
OpenClaw
扫描中
high confidence该插件的代码、运行时指令和配置请求与OpenClaw的Strava OAuth集成一致,不请求无法解释的凭证或执行意外网络访问。
安全有层次,运行前请审查代码。
版本
latestv0.1.12026/4/5
● Pending
安装命令 点击复制
官方npx clawhub@latest install @alexd10s/openclaw-strava
镜像加速npx clawhub@latest install @alexd10s/openclaw-strava --registry https://cn.clawhub-mirror.com
插件文档
@alexd10s/openclaw-strava
Turn OpenClaw into a Strava-aware running coach in minutes.
This community plugin connects your Strava account to OpenClaw so your agent can review activities, track trends, and answer training questions with your own data.
What it provides
strava_auth_statusto check whether your Strava account is connectedstrava_activitiesto list recent activitiesstrava_activity_detailto inspect a single activity in depthstrava_statsto summarize recent, year-to-date, and all-time totals
Why this plugin
- Personalized coaching context from your real Strava history
- Fast setup with OAuth linking through your OpenClaw gateway
- Practical tools for weekly reviews, progress checks, and activity deep dives
Plugin page
Install
Recommended (ClawHub):
openclaw plugins install clawhub:@alexd10s/openclaw-stravaAlternative (npm spec):
openclaw plugins install @alexd10s/openclaw-stravaLocal development install:
openclaw plugins install /path/to/openclaw-strava-plugin60-second setup
- Create a Strava API app at
https://www.strava.com/settings/api. - Set the Authorization Callback Domain to
localhost(or your gateway domain). - Configure credentials:
openclaw config set plugins.entries.strava.config.clientId "YOUR_CLIENT_ID"
openclaw config set plugins.entries.strava.config.clientSecret "YOUR_CLIENT_SECRET"- Restart your gateway.
- Ask the agent for auth status, open the returned connect URL, and approve access.
Detailed setup
- Create a Strava API app at
https://www.strava.com/settings/api. - Set the Authorization Callback Domain to
localhostfor local use, or your gateway hostname if you use a public tunnel/domain. - Configure the plugin:
openclaw config set plugins.entries.strava.config.clientId "YOUR_CLIENT_ID"
openclaw config set plugins.entries.strava.config.clientSecret "YOUR_CLIENT_SECRET"- Restart the gateway.
- Ask the agent for Strava auth status. It will return a gateway connect URL. Open that URL in a browser already signed into your OpenClaw gateway to complete OAuth.
Example prompts
- "Show my last 7 Strava activities and summarize pace trends."
- "Compare this week vs last week total distance and elevation."
- "Give me a short coaching note based on my last long run."
Publish to ClawHub
This scaffold assumes:
- package name:
@alexd10s/openclaw-strava - repo:
AlexD10S/openclaw-strava-plugin
If you change either of those, update package.json before publishing.
npm i -g clawhub
clawhub login
clawhub package publish AlexD10S/openclaw-strava-plugin --dry-run
clawhub package publish AlexD10S/openclaw-strava-pluginSecurity notes
- OAuth tokens are stored with
0600permissions. - OAuth state nonces are used to prevent CSRF during account linking.
- The tool returns a gateway-authenticated connect URL instead of a raw Strava OAuth URL.
Local development
pnpm install
pnpm test
pnpm typecheck数据来源:ClawHub ↗ · 中文优化:龙虾技能库
OpenClaw 技能定制 / 插件定制 / 私有工作流定制
免费技能或插件可能存在安全风险,如需更匹配、更安全的方案,建议联系付费定制