← Back to Skills Marketplace
jarvis563

Oura Health

by jarvis563 · GitHub ↗ · v1.0.0 · MIT-0
cross-platform ⚠ suspicious
348
Downloads
0
Stars
0
Active Installs
1
Versions
Install in OpenClaw
/install oura-health
Description
What: Query Oura Ring health data — sleep, readiness, activity, heart rate, and trends via the Oura API v2. When: User asks about their sleep, readiness, act...
Usage Guidance
This skill's code matches its description (it reads an Oura personal access token from ~/.config/oura/credentials.json and calls the Oura API). Before installing or running it: 1) Verify the credentials file exists and contains only your Oura token and the official base_url (https://api.ouraring.com/v2); do not set base_url to unknown hosts. 2) Note the SKILL.md and scripts expect /opt/homebrew/bin/python3.11 in commands—adjust invocation if your Python is elsewhere. 3) The registry metadata omits the required credentials file and python requirement — treat that as a packaging omission. 4) Inspect the scripts locally (they are included) and run them in a controlled environment if you are unsure. If you do not trust the source, do not provide your personal access token.
Capability Analysis
Type: OpenClaw Skill Name: oura-health Version: 1.0.0 The Oura Ring skill bundle is a legitimate tool designed to query health data from the official Oura API v2. The scripts (oura_api.py and health_alerts.py) use only the Python standard library to interact with api.ouraring.com and handle credentials stored locally in a standard configuration file (~/.config/oura/credentials.json). No evidence of data exfiltration, malicious execution, or prompt injection was found in the code or instructions.
Capability Assessment
Purpose & Capability
The code and SKILL.md implement exactly what the description promises (querying Oura sleep/readiness/activity/HRV and producing alerts). That functionality legitimately requires a personal Oura access token and network access to the Oura API. However, the skill metadata in the registry lists no credentials or config paths even though the runtime relies on a credentials file (~/.config/oura/credentials.json) and an accessible python binary. The omission in metadata is an inconsistency the user should be aware of.
Instruction Scope
The SKILL.md instructs the agent to read a local credentials file and to run local Python scripts that call the Oura API. The scripts only read the declared credentials file and call the base_url from that file; they do not search other system paths or exfiltrate data to hidden endpoints. One runtime oddity: commands use an absolute interpreter path (/opt/homebrew/bin/python3.11), which may not exist on all systems — the instructions are prescriptive about how to run but do not perform unexpected file reads or writes.
Install Mechanism
No install spec is provided (instruction-only with bundled Python scripts). No remote downloads or archive extraction are declared, so nothing will be automatically written to disk by an installer. This lowers installation risk; the included scripts will only run if manually invoked.
Credentials
The code requires a sensitive personal access token stored in ~/.config/oura/credentials.json (and accepts an optional base_url in that file). That is proportionate to the stated Oura purpose. However: (1) the registry metadata does not declare the config path or a primary credential, so the manifest understates required secret access; and (2) because the scripts trust the base_url from the credentials file, a user-supplied or maliciously altered credentials file could send the token to any host — potentially leaking the token if base_url points to an attacker-controlled endpoint. Users should ensure the credentials file uses the official API host and is protected (e.g., chmod 600).
Persistence & Privilege
The skill does not request persistent/always-on privileges and does not modify other skills or system-wide settings. It is user-invocable and does not request elevated platform privileges.
How to Use
  1. Make sure OpenClaw is installed (local or Docker)
  2. Run the install command in chat: /install oura-health
  3. After installation, invoke the skill by name or use /oura-health
  4. Provide required inputs per the skill's parameter spec and get structured output
Version History
v1.0.0
Initial release: 7 commands (status, briefing, sleep, readiness, activity, heartrate, trends), health alerts checker, stdlib-only Python, zero dependencies. First wearable health skill for OpenClaw.
Metadata
Slug oura-health
Version 1.0.0
License MIT-0
All-time Installs 0
Active Installs 0
Total Versions 1
Frequently Asked Questions

What is Oura Health?

What: Query Oura Ring health data — sleep, readiness, activity, heart rate, and trends via the Oura API v2. When: User asks about their sleep, readiness, act... It is an AI Agent Skill for Claude Code / OpenClaw, with 348 downloads so far.

How do I install Oura Health?

Run "/install oura-health" in the OpenClaw or Claude Code chat to install it in one step — no extra setup required.

Is Oura Health free?

Yes, Oura Health is completely free, licensed under MIT-0. You can download, install and use it at no cost.

Which platforms does Oura Health support?

Oura Health is cross-platform and runs anywhere OpenClaw / Claude Code is available (cross-platform).

Who created Oura Health?

It is built and maintained by jarvis563 (@jarvis563); the current version is v1.0.0.

💬 Comments