Oura Ring Analytics

Oura Ring data integration and analytics. Fetch sleep scores, readiness, activity, HRV, and trends from the Oura Cloud API. Generate automated reports, correlations with productivity, and trigger-based alerts for low recovery days. Requires OURA_API_TOKEN (get at cloud.ouraring.com).

This package appears to be a legitimate Oura data client and analytics tool. Before installing, verify the upstream repository (SKILL.md points to a GitHub repo) and inspect the code yourself if you can. When creating the Oura personal access token, grant the minimum read scopes necessary rather than 'all scopes.' Protect your tokens (do not commit them to git); the skill stores data locally under ~/.oura-analytics — clear or encrypt this if you are concerned about sensitive health data. If you use Telegram alerts, know that a Telegram bot token and chat ID are required and will be used to send messages. Finally, if you do not want the agent to run this skill autonomously, configure the agent/skill permissions accordingly.

Type: OpenClaw Skill Name: oura-analytics Version: 1.0.0 The OpenClaw AgentSkills bundle for Oura Analytics appears benign. It integrates with the Oura Cloud API and Telegram for legitimate purposes (fetching health data, sending alerts/reports). The OURA_API_TOKEN is handled securely via environment variables, and all data is stored locally in `~/.oura-analytics/cache/`. The `SKILL.md` instructions and `openclaw cron add` messages are descriptive and align with the stated purpose, showing no evidence of prompt injection to manipulate the AI agent or perform unauthorized actions. No suspicious external endpoints, obfuscation, or malicious execution patterns were found.