← 返回 Skills 市场
314
总下载
0
收藏
0
当前安装
1
版本数
在 OpenClaw 中安装
/install openclaw-withings
功能描述
Official Withings OAuth integration for OpenClaw. Use to connect/authorize a personal Withings account, store+refresh tokens locally, and fetch health measur...
安全使用建议
This skill appears to be a legitimate Withings OAuth client. Before installing: (1) confirm the registry metadata and SKILL.md agree — the skill needs WITHINGS_CLIENT_ID, WITHINGS_CLIENT_SECRET, and WITHINGS_REDIRECT_URI; (2) only provide client credentials you control for personal use; (3) be aware the skill will save OAuth tokens to ~/.config/openclaw/withings/token.json (check and, if desired, change WITHINGS_TOKEN_PATH); (4) verify the skill source if possible (homepage/source is missing) and prefer published code from an official or trusted repo; and (5) if you stop using the skill, revoke the Withings token and delete the local token file.
功能分析
Type: OpenClaw Skill
Name: openclaw-withings
Version: 0.1.0
The skill bundle is a standard OAuth2 integration for the Withings health API. It follows security best practices by using Python's standard library to avoid supply chain risks and setting restricted file permissions (0o600) on the stored token file (~/.config/openclaw/withings/token.json). The scripts (withings_fetch_daily.py, withings_token.py, etc.) communicate exclusively with official Withings endpoints (wbsapi.withings.net and account.withings.com) and perform data normalization as described in the documentation without any signs of malicious intent, exfiltration, or prompt injection.
能力评估
Purpose & Capability
The name/description (Withings OAuth integration) matches the code and instructions: it implements OAuth, fetches measurements/sleep, normalizes and renders results. However the registry metadata at the top lists no required environment variables while SKILL.md and the scripts require WITHINGS_CLIENT_ID, WITHINGS_CLIENT_SECRET, and WITHINGS_REDIRECT_URI; this metadata mismatch is likely a packaging/manifest omission and should be corrected.
Instruction Scope
SKILL.md instructs the agent to run local Python scripts that only access declared env vars, run a local loopback listener optionally, call Withings endpoints (account.withings.com and wbsapi.withings.net), and read/write a token file under ~/.config/openclaw/withings. There are no instructions to read unrelated system files or send data to third-party endpoints.
Install Mechanism
There is no install spec and all code is bundled as local scripts (no external downloads or package installs). That minimizes installation risk; nothing is written to disk by an installer beyond the token file the scripts themselves create when run.
Credentials
The required secrets (client_id, client_secret, redirect_uri) are appropriate and necessary for OAuth. The skill stores tokens under ~/.config/openclaw/withings/token.json (with chmod attempt to 0o600). The notable issue: the registry metadata did not declare these required env vars — users should be aware the skill will need those secrets and will store a token file locally.
Persistence & Privilege
The skill does not request always:true and does not modify other skills or system-wide configs. It persists OAuth tokens only to a user-scoped config path, which is normal for an OAuth client; treat the token file as a sensitive secret.
如何使用
- 确保已安装 OpenClaw（本地或 Docker 部署）
- 在对话框中输入安装命令：
/install openclaw-withings - 安装完成后，直接呼叫该 Skill 的名称或使用
/openclaw-withings触发 - 根据 Skill 的参数说明提供必要输入，即可获得结构化输出
版本历史
v0.1.0
Initial release: OAuth (remote copy/paste + optional loopback), fetch daily measurements (weight/body fat/BP/HR) + sleep summary best-effort, normalize for Wellness hub, and channel-aware rendering.
元数据
常见问题
Withings (Official API) 是什么？
Official Withings OAuth integration for OpenClaw. Use to connect/authorize a personal Withings account, store+refresh tokens locally, and fetch health measur... 它是一个面向 Claude Code / OpenClaw 的 AI Agent Skill 插件，目前累计下载 314 次。
如何安装 Withings (Official API)？
在 OpenClaw 或 Claude Code 对话框中运行命令「/install openclaw-withings」即可一键安装，无需额外配置。
Withings (Official API) 是免费的吗？
是的，Withings (Official API) 完全免费，采用 MIT-0 许可证，可自由下载、安装和使用。
Withings (Official API) 支持哪些平台？
Withings (Official API) 跨平台运行，可在任意部署了 OpenClaw / Claude Code 的环境中使用（cross-platform）。
谁开发了 Withings (Official API)？
由 Gavin C.（@gavinchengcool）开发并维护，当前版本 v0.1.0。
推荐 Skills