← Back to Skills Marketplace
WhatPulse AI Agent Skill
by
smitmartijn
· GitHub ↗
· v1.0.0
302
Downloads
0
Stars
0
Active Installs
1
Versions
Install in OpenClaw
/install whatpulse-ai-agent-skill
Description
Query WhatPulse computer usage statistics using natural language. Keystrokes, mouse activity, application screen time, network bandwidth, website tracking, u...
Usage Guidance
This skill will read your WhatPulse database and can reveal very sensitive personal telemetry (keystrokes, websites visited, app usage, uptime). Before installing: (1) Review SKILL.md so you understand what SQL queries the agent will run and ensure sqlite3 is present. (2) Do NOT set WHATPULSE_DB to a path that exposes your DB to remote machines or cloud storage unless you explicitly want that data off your device — the README’s 'Remote Access' instructions can lead to accidental data exfiltration. (3) If you run the agent on a remote host, expect the agent to be able to read the full DB at the path you expose. (4) Consider running the skill only locally or with a sanitized/cropped snapshot of the DB if you want to limit exposure. (5) Note the minor metadata mismatch: WHATPULSE_DB is used by the skill but not declared in the registry; treat that as an informational gap and verify env usage before trusting the skill.
Capability Analysis
Type: OpenClaw Skill
Name: whatpulse-ai-agent-skill
Version: 1.0.0
The skill is designed to be benign, providing read-only access to a local SQLite database. The `SKILL.md` contains extensive and explicit 'CRITICAL SAFETY RULES' that instruct the AI agent to use `sqlite3 -readonly`, forbid all write operations (INSERT, UPDATE, DELETE, DROP, ALTER, CREATE, ATTACH, VACUUM, PRAGMA), and mandate a secure heredoc pattern for SQL execution to prevent shell injection. While the skill involves executing shell commands (`sqlite3`) and processing user input (`$ARGUMENTS`), the instructions are meticulously crafted to prevent malicious actions, data exfiltration, or persistence mechanisms. The instructions are defensive and aim to mitigate common vulnerabilities, not introduce them.
Capability Assessment
Purpose & Capability
Name/description match the instructions: the skill only needs to read a local WhatPulse SQLite database and requires the sqlite3 CLI. Requiring sqlite3 is proportional and expected for this purpose.
Instruction Scope
SKILL.md explicitly instructs the agent to run sqlite3 in read-only mode and to return answers based on queries of the local DB — that stays within the stated purpose. However the README and SKILL.md include a 'Remote Access' section that instructs users how to snapshot/sync the DB to remote machines. That guidance encourages moving highly sensitive telemetry (keystrokes, websites, app usage) off the local machine, which increases risk. The SKILL.md also references environment variables (WHATPULSE_DB, LOCALAPPDATA, HOME) for locating the DB; WHATPULSE_DB is optional but referenced even though the registry metadata lists no env vars.
Install Mechanism
This is instruction-only with no install spec or code to download or execute beyond invoking the sqlite3 CLI. That is the lowest-risk install model and is proportionate for the described functionality.
Credentials
Registry metadata declares no required env vars, yet SKILL.md uses WHATPULSE_DB as an optional override and also references LOCALAPPDATA and HOME. The optional WHATPULSE_DB can be used to point the agent at a synced/remote DB; if a user sets this to a remote-mounted path or exposes a snapshot, the agent (especially if running remotely) can access all telemetry. No other unrelated credentials are requested, but the documentation’s instructions to create scheduled backups and sync via cloud storage materially increases the scope of data exposure.
Persistence & Privilege
always is false and there is no installation script that modifies agent-wide settings or other skills. The skill runs only when invoked and doesn't request elevated or persistent platform privileges.
How to Use
- Make sure OpenClaw is installed (local or Docker)
- Run the install command in chat:
/install whatpulse-ai-agent-skill - After installation, invoke the skill by name or use
/whatpulse-ai-agent-skill - Provide required inputs per the skill's parameter spec and get structured output
Version History
v1.0.0
WhatPulse AI Agent Skill 1.0.0 – Initial Release
- Query your local WhatPulse database for typing, mouse, application usage, uptime, network, and website activity via natural language prompts.
- Strictly enforces read-only, safe queries: all SQL is executed using sqlite3 -readonly with heredoc formatting to guarantee zero risk of data modification.
- Smart automatic database discovery: checks environment variables and platform-specific default WhatPulse database locations.
- Built-in reference for table schemas, key code decoding, and JOIN/query patterns for user-friendly answers.
- Supports trigger words for quick access to keystroke stats, mouse distance, bandwidth, screen time, and more.
- Detailed safety and formatting rules prevent any accidental writes or corruption of your data.
Metadata
Frequently Asked Questions
What is WhatPulse AI Agent Skill?
Query WhatPulse computer usage statistics using natural language. Keystrokes, mouse activity, application screen time, network bandwidth, website tracking, u... It is an AI Agent Skill for Claude Code / OpenClaw, with 302 downloads so far.
How do I install WhatPulse AI Agent Skill?
Run "/install whatpulse-ai-agent-skill" in the OpenClaw or Claude Code chat to install it in one step — no extra setup required.
Is WhatPulse AI Agent Skill free?
Yes, WhatPulse AI Agent Skill is completely free (open-source). You can download, install and use it at no cost.
Which platforms does WhatPulse AI Agent Skill support?
WhatPulse AI Agent Skill is cross-platform and runs anywhere OpenClaw / Claude Code is available (macos, linux, windows).
Who created WhatPulse AI Agent Skill?
It is built and maintained by smitmartijn (@smitmartijn); the current version is v1.0.0.
More Skills