← Back to Skills Marketplace
Sleepwell
by
BytesAgain2
· GitHub ↗
· v2.0.1
· MIT-0
346
Downloads
0
Stars
1
Active Installs
8
Versions
Install in OpenClaw
/install sleepwell
Description
Track sleep habits and analyze rest patterns over time. Use when logging bedtimes, planning schedules, tracking streaks, reviewing weekly patterns.
Usage Guidance
This skill appears to be a straightforward, local sleep-logging tool. Before installing, note three practical items: (1) the scripts call python3 but SKILL.md doesn't list Python as a dependency — ensure python3 is available; (2) there are two data locations used (~/.local/share/sleepwell and ~/.sleep) which may lead to split data — decide which you want and (optionally) set SLEEP_DIR to control where the diary stores data; (3) all data and exports are stored on disk in plain files under your home directory (not encrypted or remote), so avoid logging sensitive personal info or regularly back up / secure the directory. Review the two included scripts if you want to confirm behavior, and remove the data directories if you uninstall the skill.
Capability Analysis
Type: OpenClaw Skill
Name: sleepwell
Version: 2.0.1
The skill bundle contains a critical command injection vulnerability in `scripts/sleep_diary.sh`. User-supplied arguments for sleep hours and quality are directly interpolated into a Python heredoc without sanitization, which allows for arbitrary code execution. While the stated purpose of sleep and productivity tracking is benign and no evidence of intentional malice, data exfiltration, or backdoors was found, the high-risk nature of this vulnerability warrants a suspicious classification.
Capability Assessment
Purpose & Capability
The scripts implement the described logging, search, stats, export and review features and store data under the user's home directory, which is consistent with a local sleep-tracking tool. Minor mismatch: SKILL.md states "No external dependencies" while scripts call python3 for several commands — python3 should be listed as a runtime dependency.
Instruction Scope
Instructions and scripts operate only on per-user data directories and log files in the user's home (~/.local/share/sleepwell and ~/.sleep). They create and read local log/db files, run local commands (date, grep, wc, du, tail, python3). Inconsistency: two different data directories are used (script.sh uses ~/.local/share/sleepwell, sleep_diary.sh uses SLEEP_DIR defaulting to ~/.sleep), which could confuse users expecting a single data location.
Install Mechanism
No install spec is present (instruction-only), so nothing is downloaded or executed from remote URLs by an installer. The included scripts are plain shell and Python code; there is no evidence of packaged external installs or network-based installers.
Credentials
The skill requests no credentials or special environment variables. The sleep diary script supports overriding SLEEP_DIR via the SLEEP_DIR env var (reasonable). SKILL.md does not document SLEEP_DIR or the python3 dependency — these omissions are informational gaps but not evidence of excessive privileges.
Persistence & Privilege
The skill is not always-enabled and does not request system-wide configuration changes. It only writes files in the installing user's home directory (log files, export files). It does not modify other skills or system settings.
How to Use
- Make sure OpenClaw is installed (local or Docker)
- Run the install command in chat:
/install sleepwell - After installation, invoke the skill by name or use
/sleepwell - Provide required inputs per the skill's parameter spec and get structured output
Version History
v2.0.1
update
v2.0.0
v2.5 standard: Use-when desc, homepage, source, security fix
v1.0.5
old template -> domain-specific v2.0.0
v1.0.4
old template -> domain-specific v2.0.0
v1.0.3
Quality upgrade
v1.0.2
Quality upgrade: custom functionality
v1.0.1
Standards compliance: unique content, no template text
v1.0.0
Initial release
Metadata
Frequently Asked Questions
What is Sleepwell?
Track sleep habits and analyze rest patterns over time. Use when logging bedtimes, planning schedules, tracking streaks, reviewing weekly patterns. It is an AI Agent Skill for Claude Code / OpenClaw, with 346 downloads so far.
How do I install Sleepwell?
Run "/install sleepwell" in the OpenClaw or Claude Code chat to install it in one step — no extra setup required.
Is Sleepwell free?
Yes, Sleepwell is completely free, licensed under MIT-0. You can download, install and use it at no cost.
Which platforms does Sleepwell support?
Sleepwell is cross-platform and runs anywhere OpenClaw / Claude Code is available (cross-platform).
Who created Sleepwell?
It is built and maintained by BytesAgain2 (@ckchzh); the current version is v2.0.1.
More Skills