← Back to Skills Marketplace
VITA — Longevity Intelligence
by
Alex Dobrin
· GitHub ↗
· v1.0.0
406
Downloads
0
Stars
0
Active Installs
1
Versions
Install in OpenClaw
/install vita-app
Description
Access the user's personal health data from VITA, their longevity platform. Use this when the user asks about their health, how they're feeling today, sleep,...
Usage Guidance
This skill appears to do what it says (call VITA and return health insights), but the published metadata does not match the runtime instructions. Before installing: 1) Confirm you trust the skill publisher and VITA (no homepage or known source is provided). 2) Be comfortable storing an API key in ~/.openclaw/openclaw.json (it will be in plain JSON unless you take extra precautions). 3) Prefer creating a least-privilege VITA API key you can revoke, and rotate/revoke it if you stop using the skill. 4) Verify the API URL is the official VITA endpoint and watch for any unexpected network calls when using the skill. 5) If you need stronger protection, ask the skill author to declare required env/config in the registry metadata or to support a more secure secret storage option. If you cannot verify the author/source or are uncomfortable storing the key in your agent config, do not enable the skill.
Capability Analysis
Type: OpenClaw Skill
Name: vita-app
Version: 1.0.0
The skill accesses sensitive personal health data via an API, which is a high-risk operation, even if it's the stated purpose. It uses `curl` with dynamic parameters (`action`) to interact with the API, as shown in `SKILL.md`. While intended for legitimate API calls to `app.vitadao.com`, the dynamic nature of the `action` parameter in a shell command introduces a potential shell injection vulnerability if the AI agent's input sanitization is insufficient. There is no evidence of intentional malicious behavior, but the combination of sensitive data access and a potential command injection vector classifies it as suspicious.
Capability Assessment
Purpose & Capability
The skill name/description (VITA health data) aligns with the actions documented in SKILL.md (get_daily_insight, get_todays_outlook, get_protocols). However, the registry metadata lists no required environment variables or credentials while SKILL.md explicitly instructs the user to add VITA_API_KEY and VITA_API_URL to ~/.openclaw/openclaw.json. That metadata omission is inconsistent.
Instruction Scope
SKILL.md is narrowly scoped to calling the VITA API and interpreting results; it does not ask the agent to read unrelated files or exfiltrate arbitrary data. It does, however, instruct the user to modify the agent config file (~/.openclaw/openclaw.json) to store a bearer API key — this is within the skill's operational needs but should be flagged because the skill metadata didn't declare that requirement.
Install Mechanism
This is an instruction-only skill with no install spec or code files. That lowers surface risk because nothing is downloaded or executed automatically.
Credentials
The SKILL.md requires a VITA_API_KEY and VITA_API_URL (a bearer token and endpoint). The registry metadata, however, claims 'Required env vars: none' and 'Required config paths: none' — an inconsistency. Also, the instructions direct storing the API key in cleartext inside ~/.openclaw/openclaw.json, which increases risk if that file is not protected or is backed up/shared.
Persistence & Privilege
always is false and the skill is user-invocable (normal). The SKILL.md asks the user to enable the skill in the agent config (writing to ~/.openclaw/openclaw.json) so it can run; writing its own enablement settings is typical, but the metadata omitted that the config path is used.
How to Use
- Make sure OpenClaw is installed (local or Docker)
- Run the install command in chat:
/install vita-app - After installation, invoke the skill by name or use
/vita-app - Provide required inputs per the skill's parameter spec and get structured output
Version History
v1.0.0
Initial release of vita-app skill.
- Connects to VITA to provide users with personal health data and daily AI insights.
- Supports fetching today’s AI summary, wearable metrics (Oura/WHOOP), and active supplement protocols.
- Includes setup instructions for API key and environment configuration.
- Describes three main actions: get_daily_insight, get_todays_outlook, and get_protocols.
- Outlines recommended usage patterns for querying and presenting health data.
Metadata
Frequently Asked Questions
What is VITA — Longevity Intelligence?
Access the user's personal health data from VITA, their longevity platform. Use this when the user asks about their health, how they're feeling today, sleep,... It is an AI Agent Skill for Claude Code / OpenClaw, with 406 downloads so far.
How do I install VITA — Longevity Intelligence?
Run "/install vita-app" in the OpenClaw or Claude Code chat to install it in one step — no extra setup required.
Is VITA — Longevity Intelligence free?
Yes, VITA — Longevity Intelligence is completely free (open-source). You can download, install and use it at no cost.
Which platforms does VITA — Longevity Intelligence support?
VITA — Longevity Intelligence is cross-platform and runs anywhere OpenClaw / Claude Code is available (cross-platform).
Who created VITA — Longevity Intelligence?
It is built and maintained by Alex Dobrin (@dobrinalexandru); the current version is v1.0.0.
More Skills