← 返回 Skills 市场
jarvis563

Oura Health

作者 jarvis563 · GitHub ↗ · v1.0.0 · MIT-0
cross-platform ⚠ suspicious
348
总下载
0
收藏
0
当前安装
1
版本数
在 OpenClaw 中安装
/install oura-health
功能描述
What: Query Oura Ring health data — sleep, readiness, activity, heart rate, and trends via the Oura API v2. When: User asks about their sleep, readiness, act...
安全使用建议
This skill's code matches its description (it reads an Oura personal access token from ~/.config/oura/credentials.json and calls the Oura API). Before installing or running it: 1) Verify the credentials file exists and contains only your Oura token and the official base_url (https://api.ouraring.com/v2); do not set base_url to unknown hosts. 2) Note the SKILL.md and scripts expect /opt/homebrew/bin/python3.11 in commands—adjust invocation if your Python is elsewhere. 3) The registry metadata omits the required credentials file and python requirement — treat that as a packaging omission. 4) Inspect the scripts locally (they are included) and run them in a controlled environment if you are unsure. If you do not trust the source, do not provide your personal access token.
功能分析
Type: OpenClaw Skill Name: oura-health Version: 1.0.0 The Oura Ring skill bundle is a legitimate tool designed to query health data from the official Oura API v2. The scripts (oura_api.py and health_alerts.py) use only the Python standard library to interact with api.ouraring.com and handle credentials stored locally in a standard configuration file (~/.config/oura/credentials.json). No evidence of data exfiltration, malicious execution, or prompt injection was found in the code or instructions.
能力评估
Purpose & Capability
The code and SKILL.md implement exactly what the description promises (querying Oura sleep/readiness/activity/HRV and producing alerts). That functionality legitimately requires a personal Oura access token and network access to the Oura API. However, the skill metadata in the registry lists no credentials or config paths even though the runtime relies on a credentials file (~/.config/oura/credentials.json) and an accessible python binary. The omission in metadata is an inconsistency the user should be aware of.
Instruction Scope
The SKILL.md instructs the agent to read a local credentials file and to run local Python scripts that call the Oura API. The scripts only read the declared credentials file and call the base_url from that file; they do not search other system paths or exfiltrate data to hidden endpoints. One runtime oddity: commands use an absolute interpreter path (/opt/homebrew/bin/python3.11), which may not exist on all systems — the instructions are prescriptive about how to run but do not perform unexpected file reads or writes.
Install Mechanism
No install spec is provided (instruction-only with bundled Python scripts). No remote downloads or archive extraction are declared, so nothing will be automatically written to disk by an installer. This lowers installation risk; the included scripts will only run if manually invoked.
Credentials
The code requires a sensitive personal access token stored in ~/.config/oura/credentials.json (and accepts an optional base_url in that file). That is proportionate to the stated Oura purpose. However: (1) the registry metadata does not declare the config path or a primary credential, so the manifest understates required secret access; and (2) because the scripts trust the base_url from the credentials file, a user-supplied or maliciously altered credentials file could send the token to any host — potentially leaking the token if base_url points to an attacker-controlled endpoint. Users should ensure the credentials file uses the official API host and is protected (e.g., chmod 600).
Persistence & Privilege
The skill does not request persistent/always-on privileges and does not modify other skills or system-wide settings. It is user-invocable and does not request elevated platform privileges.
如何使用
  1. 确保已安装 OpenClaw(本地或 Docker 部署)
  2. 在对话框中输入安装命令:/install oura-health
  3. 安装完成后,直接呼叫该 Skill 的名称或使用 /oura-health 触发
  4. 根据 Skill 的参数说明提供必要输入,即可获得结构化输出
版本历史
v1.0.0
Initial release: 7 commands (status, briefing, sleep, readiness, activity, heartrate, trends), health alerts checker, stdlib-only Python, zero dependencies. First wearable health skill for OpenClaw.
元数据
Slug oura-health
版本 1.0.0
许可证 MIT-0
累计安装 0
当前安装数 0
历史版本数 1
常见问题

Oura Health 是什么?

What: Query Oura Ring health data — sleep, readiness, activity, heart rate, and trends via the Oura API v2. When: User asks about their sleep, readiness, act... 它是一个面向 Claude Code / OpenClaw 的 AI Agent Skill 插件,目前累计下载 348 次。

如何安装 Oura Health?

在 OpenClaw 或 Claude Code 对话框中运行命令「/install oura-health」即可一键安装,无需额外配置。

Oura Health 是免费的吗?

是的,Oura Health 完全免费,采用 MIT-0 许可证,可自由下载、安装和使用。

Oura Health 支持哪些平台?

Oura Health 跨平台运行,可在任意部署了 OpenClaw / Claude Code 的环境中使用(cross-platform)。

谁开发了 Oura Health?

由 jarvis563(@jarvis563)开发并维护,当前版本 v1.0.0。

💬 留言讨论