Perpetua

OAuth proxy for calling external APIs (Oura, Google Calendar, etc.) via Perpetua.sh hosted API using a single API key. Use when fetching Oura data, Google Ca...

This skill will make HTTP requests to the external host https://www.perpetua.sh and requires you to provide a PERPETUA_API_KEY that lets the service access your Google Calendar, Oura data, and any connected providers. Before installing or using it: (1) Verify the Perpetua.sh service and publisher (there is no homepage and the owner is unknown); (2) Do not paste long-lived high-privilege credentials unless you trust the service — prefer a key with minimal scopes and easy rotation; (3) Consider hosting the OSS/local option (localhost:3001) if you want to avoid sending data to a third-party; (4) Ask the publisher to update the skill metadata to explicitly declare PERPETUA_API_KEY and provide documentation/privacy policy; (5) If you allow autonomous agent invocation, be aware the agent could call the proxy and fetch personal calendar/health data without repeated explicit prompts. If you cannot verify the service or publisher, treat this skill as high-risk and avoid providing secrets.

Type: OpenClaw Skill Name: perpetua Version: 1.0.0 The skill bundle is benign. It transparently describes its function as an OAuth proxy for external APIs via the `perpetua.sh` hosted service. All `curl` commands and instructions in `SKILL.md` are directly related to interacting with `https://www.perpetua.sh` using a `PERPETUA_API_KEY`, which is consistent with its stated purpose. There is no evidence of data exfiltration beyond the necessary API key for the service, malicious execution, persistence mechanisms, or prompt injection attempts to mislead the agent into unauthorized actions.