← Back to Skills Marketplace
314
Downloads
0
Stars
0
Active Installs
1
Versions
Install in OpenClaw
/install openclaw-withings
Description
Official Withings OAuth integration for OpenClaw. Use to connect/authorize a personal Withings account, store+refresh tokens locally, and fetch health measur...
Usage Guidance
This skill appears to be a legitimate Withings OAuth client. Before installing: (1) confirm the registry metadata and SKILL.md agree — the skill needs WITHINGS_CLIENT_ID, WITHINGS_CLIENT_SECRET, and WITHINGS_REDIRECT_URI; (2) only provide client credentials you control for personal use; (3) be aware the skill will save OAuth tokens to ~/.config/openclaw/withings/token.json (check and, if desired, change WITHINGS_TOKEN_PATH); (4) verify the skill source if possible (homepage/source is missing) and prefer published code from an official or trusted repo; and (5) if you stop using the skill, revoke the Withings token and delete the local token file.
Capability Analysis
Type: OpenClaw Skill
Name: openclaw-withings
Version: 0.1.0
The skill bundle is a standard OAuth2 integration for the Withings health API. It follows security best practices by using Python's standard library to avoid supply chain risks and setting restricted file permissions (0o600) on the stored token file (~/.config/openclaw/withings/token.json). The scripts (withings_fetch_daily.py, withings_token.py, etc.) communicate exclusively with official Withings endpoints (wbsapi.withings.net and account.withings.com) and perform data normalization as described in the documentation without any signs of malicious intent, exfiltration, or prompt injection.
Capability Assessment
Purpose & Capability
The name/description (Withings OAuth integration) matches the code and instructions: it implements OAuth, fetches measurements/sleep, normalizes and renders results. However the registry metadata at the top lists no required environment variables while SKILL.md and the scripts require WITHINGS_CLIENT_ID, WITHINGS_CLIENT_SECRET, and WITHINGS_REDIRECT_URI; this metadata mismatch is likely a packaging/manifest omission and should be corrected.
Instruction Scope
SKILL.md instructs the agent to run local Python scripts that only access declared env vars, run a local loopback listener optionally, call Withings endpoints (account.withings.com and wbsapi.withings.net), and read/write a token file under ~/.config/openclaw/withings. There are no instructions to read unrelated system files or send data to third-party endpoints.
Install Mechanism
There is no install spec and all code is bundled as local scripts (no external downloads or package installs). That minimizes installation risk; nothing is written to disk by an installer beyond the token file the scripts themselves create when run.
Credentials
The required secrets (client_id, client_secret, redirect_uri) are appropriate and necessary for OAuth. The skill stores tokens under ~/.config/openclaw/withings/token.json (with chmod attempt to 0o600). The notable issue: the registry metadata did not declare these required env vars — users should be aware the skill will need those secrets and will store a token file locally.
Persistence & Privilege
The skill does not request always:true and does not modify other skills or system-wide configs. It persists OAuth tokens only to a user-scoped config path, which is normal for an OAuth client; treat the token file as a sensitive secret.
How to Use
- Make sure OpenClaw is installed (local or Docker)
- Run the install command in chat:
/install openclaw-withings - After installation, invoke the skill by name or use
/openclaw-withings - Provide required inputs per the skill's parameter spec and get structured output
Version History
v0.1.0
Initial release: OAuth (remote copy/paste + optional loopback), fetch daily measurements (weight/body fat/BP/HR) + sleep summary best-effort, normalize for Wellness hub, and channel-aware rendering.
Metadata
Frequently Asked Questions
What is Withings (Official API)?
Official Withings OAuth integration for OpenClaw. Use to connect/authorize a personal Withings account, store+refresh tokens locally, and fetch health measur... It is an AI Agent Skill for Claude Code / OpenClaw, with 314 downloads so far.
How do I install Withings (Official API)?
Run "/install openclaw-withings" in the OpenClaw or Claude Code chat to install it in one step — no extra setup required.
Is Withings (Official API) free?
Yes, Withings (Official API) is completely free, licensed under MIT-0. You can download, install and use it at no cost.
Which platforms does Withings (Official API) support?
Withings (Official API) is cross-platform and runs anywhere OpenClaw / Claude Code is available (cross-platform).
Who created Withings (Official API)?
It is built and maintained by Gavin C. (@gavinchengcool); the current version is v0.1.0.
More Skills