← Back to Skills Marketplace
gavinchengcool

Oura (API v2)

by Gavin C. · GitHub ↗ · v0.1.0 · MIT-0
cross-platform ⚠ suspicious
362
Downloads
0
Stars
0
Active Installs
1
Versions
Install in OpenClaw
/install openclaw-oura
Description
Oura Ring data source for OpenClaw (Tier 1). Use to connect an Oura account using an Oura Personal Access Token, fetch Oura v2 usercollection data (sleep, re...
Usage Guidance
This skill appears to do only what it claims (fetch Oura data and format it), but you should verify the metadata mismatch before installing: the SKILL.md and scripts require OURA_ACCESS_TOKEN even though the registry entry lists no required env vars. If you plan to use it, only provide an Oura Personal Access Token with minimal scopes needed, run the scripts in a controlled environment (or container), and inspect where outputs are written. Consider asking the publisher to update the registry metadata to declare OURA_ACCESS_TOKEN explicitly, or refuse installation until that is corrected. If you are uncomfortable providing a PAT, do not install; otherwise rotate the token after testing.
Capability Analysis
Type: OpenClaw Skill Name: openclaw-oura Version: 0.1.0 The skill bundle is a legitimate integration for fetching and processing Oura Ring data. It uses standard Python libraries (urllib) to communicate with the official Oura API (api.ouraring.com) using a user-provided access token, and the scripts (oura_fetch_daily.py, oura_normalize_daily.py, oura_render.py) perform transparent data transformation and formatting without any signs of malicious intent, obfuscation, or unauthorized data exfiltration.
Capability Assessment
Purpose & Capability
The skill's name, description, SKILL.md, and bundled scripts are coherent: they fetch Oura v2 usercollection endpoints and normalize/render daily JSON. However, the registry metadata claims no required environment variables or primary credential, while both SKILL.md and the code call for OURA_ACCESS_TOKEN. That discrepancy is unexplained and inconsistent.
Instruction Scope
Runtime instructions are narrow and self-contained: call Oura API endpoints, write a raw bundle to a local file, normalize to a daily JSON shape, and render a short text/markdown summary. The SKILL.md does not direct reading unrelated files or exfiltrating data to unexpected endpoints.
Install Mechanism
There is no install spec (instruction-only), which is lower risk. The repository does include three Python scripts (bundled with the skill) that are executed directly; no external downloads, package installs, or obscure sources are used.
Credentials
The code legitimately requires a single secret (OURA_ACCESS_TOKEN) and optionally OURA_TZ, which is proportionate to the stated function. The concern is that the registry metadata did not list this required env var — a mismatch that could lead to accidental credential disclosure or confusion about what will actually be requested at runtime.
Persistence & Privilege
The skill does not request always:true, does not modify other skills or system settings, and only writes data to paths you explicitly provide in the examples (e.g., /tmp). Autonomous invocation is enabled by default (normal); no elevated persistence is requested.
How to Use
  1. Make sure OpenClaw is installed (local or Docker)
  2. Run the install command in chat: /install openclaw-oura
  3. After installation, invoke the skill by name or use /openclaw-oura
  4. Provide required inputs per the skill's parameter spec and get structured output
Version History
v0.1.0
Initial release: connect via Personal Access Token, fetch sleep/readiness/activity for a day, normalize for Wellness hub, and channel-aware rendering.
Metadata
Slug openclaw-oura
Version 0.1.0
License MIT-0
All-time Installs 0
Active Installs 0
Total Versions 1
Frequently Asked Questions

What is Oura (API v2)?

Oura Ring data source for OpenClaw (Tier 1). Use to connect an Oura account using an Oura Personal Access Token, fetch Oura v2 usercollection data (sleep, re... It is an AI Agent Skill for Claude Code / OpenClaw, with 362 downloads so far.

How do I install Oura (API v2)?

Run "/install openclaw-oura" in the OpenClaw or Claude Code chat to install it in one step — no extra setup required.

Is Oura (API v2) free?

Yes, Oura (API v2) is completely free, licensed under MIT-0. You can download, install and use it at no cost.

Which platforms does Oura (API v2) support?

Oura (API v2) is cross-platform and runs anywhere OpenClaw / Claude Code is available (cross-platform).

Who created Oura (API v2)?

It is built and maintained by Gavin C. (@gavinchengcool); the current version is v0.1.0.

💬 Comments