← 返回 Skills 市场
362
总下载
0
收藏
0
当前安装
1
版本数
在 OpenClaw 中安装
/install openclaw-oura
功能描述
Oura Ring data source for OpenClaw (Tier 1). Use to connect an Oura account using an Oura Personal Access Token, fetch Oura v2 usercollection data (sleep, re...
安全使用建议
This skill appears to do only what it claims (fetch Oura data and format it), but you should verify the metadata mismatch before installing: the SKILL.md and scripts require OURA_ACCESS_TOKEN even though the registry entry lists no required env vars. If you plan to use it, only provide an Oura Personal Access Token with minimal scopes needed, run the scripts in a controlled environment (or container), and inspect where outputs are written. Consider asking the publisher to update the registry metadata to declare OURA_ACCESS_TOKEN explicitly, or refuse installation until that is corrected. If you are uncomfortable providing a PAT, do not install; otherwise rotate the token after testing.
功能分析
Type: OpenClaw Skill
Name: openclaw-oura
Version: 0.1.0
The skill bundle is a legitimate integration for fetching and processing Oura Ring data. It uses standard Python libraries (urllib) to communicate with the official Oura API (api.ouraring.com) using a user-provided access token, and the scripts (oura_fetch_daily.py, oura_normalize_daily.py, oura_render.py) perform transparent data transformation and formatting without any signs of malicious intent, obfuscation, or unauthorized data exfiltration.
能力评估
Purpose & Capability
The skill's name, description, SKILL.md, and bundled scripts are coherent: they fetch Oura v2 usercollection endpoints and normalize/render daily JSON. However, the registry metadata claims no required environment variables or primary credential, while both SKILL.md and the code call for OURA_ACCESS_TOKEN. That discrepancy is unexplained and inconsistent.
Instruction Scope
Runtime instructions are narrow and self-contained: call Oura API endpoints, write a raw bundle to a local file, normalize to a daily JSON shape, and render a short text/markdown summary. The SKILL.md does not direct reading unrelated files or exfiltrating data to unexpected endpoints.
Install Mechanism
There is no install spec (instruction-only), which is lower risk. The repository does include three Python scripts (bundled with the skill) that are executed directly; no external downloads, package installs, or obscure sources are used.
Credentials
The code legitimately requires a single secret (OURA_ACCESS_TOKEN) and optionally OURA_TZ, which is proportionate to the stated function. The concern is that the registry metadata did not list this required env var — a mismatch that could lead to accidental credential disclosure or confusion about what will actually be requested at runtime.
Persistence & Privilege
The skill does not request always:true, does not modify other skills or system settings, and only writes data to paths you explicitly provide in the examples (e.g., /tmp). Autonomous invocation is enabled by default (normal); no elevated persistence is requested.
如何使用
- 确保已安装 OpenClaw(本地或 Docker 部署)
- 在对话框中输入安装命令:
/install openclaw-oura - 安装完成后,直接呼叫该 Skill 的名称或使用
/openclaw-oura触发 - 根据 Skill 的参数说明提供必要输入,即可获得结构化输出
版本历史
v0.1.0
Initial release: connect via Personal Access Token, fetch sleep/readiness/activity for a day, normalize for Wellness hub, and channel-aware rendering.
元数据
常见问题
Oura (API v2) 是什么?
Oura Ring data source for OpenClaw (Tier 1). Use to connect an Oura account using an Oura Personal Access Token, fetch Oura v2 usercollection data (sleep, re... 它是一个面向 Claude Code / OpenClaw 的 AI Agent Skill 插件,目前累计下载 362 次。
如何安装 Oura (API v2)?
在 OpenClaw 或 Claude Code 对话框中运行命令「/install openclaw-oura」即可一键安装,无需额外配置。
Oura (API v2) 是免费的吗?
是的,Oura (API v2) 完全免费,采用 MIT-0 许可证,可自由下载、安装和使用。
Oura (API v2) 支持哪些平台?
Oura (API v2) 跨平台运行,可在任意部署了 OpenClaw / Claude Code 的环境中使用(cross-platform)。
谁开发了 Oura (API v2)?
由 Gavin C.(@gavinchengcool)开发并维护,当前版本 v0.1.0。
推荐 Skills