Nightscout-Local

Read glucose data from a Nightscout site. Use when the user asks for the current CGM reading, trend, recent readings, or Nightscout status. This skill is rea...

This skill appears to do what it says (read-only Nightscout queries), but before installing: 1) verify or correct SKILL.md paths — the docs reference /Users/serveradmin/... and a current_bg.py that is not included; running those commands as-is may fail or reveal irrelevant filesystem paths. 2) Provide NIGHTSCOUT_BASE_URL explicitly at runtime (the script uses it though the metadata didn't declare it). 3) Inspect the included Python script locally — it's short and readable and only issues HTTP GETs to the configured Nightscout URL and prints JSON. 4) Only point the skill at Nightscout endpoints you trust (no credentials are used, but the skill will contact whatever URL you provide). 5) If you plan autonomous use, ensure the agent is restricted to only trusted Nightscout sites. If you want higher assurance, ask the publisher to fix the documentation inconsistencies and explicitly declare NIGHTSCOUT_BASE_URL in the skill metadata.

Type: OpenClaw Skill Name: nightscout-local Version: 1.0.0 The skill is a legitimate tool for retrieving glucose data from a Nightscout API. The Python script (nightscout_read.py) uses standard libraries to perform read-only API requests and contains no evidence of data exfiltration, obfuscation, or unauthorized command execution. While SKILL.md contains environment-specific hardcoded paths (e.g., /Users/serveradmin/), these appear to be configuration artifacts rather than malicious instructions.