Ultrahuman Biodata Assistant

Use the Ultrahuman MCP to answer questions about sleep, recovery, readiness, daily metrics, morning brief, ring data, glucose, and metabolic health. Use this...

This skill appears to do what it says (fetch and summarize Ultrahuman metrics) but has an important transparency problem: SKILL.md expects ULTRAHUMAN_TOKEN and ULTRAHUMAN_EMAIL and an ultrahuman_mcp server, yet the skill metadata lists no required credentials or endpoint. Before installing or enabling the skill, ask the publisher these questions: (1) exactly which endpoint(s) will ultrahuman_get_daily_metrics call (full URLs) and who operates that MCP server; (2) why ULTRAHUMAN_TOKEN/ULTRAHUMAN_EMAIL are not declared in the manifest and what permissions the token has; (3) how tokens are stored/used and whether they are transmitted/stored outside your environment; (4) whether the skill logs or transmits raw health data to any third party beyond Ultrahuman; and (5) whether authentication can be done per-request (user-provided) rather than requiring a long-lived token in environment. Treat any request for your Ultrahuman credentials or health data as sensitive — only proceed if you trust the skill source and get explicit details about endpoints, token scope, and data retention. If you cannot get clear answers, do not enable the skill for sensitive health data.

Type: OpenClaw Skill Name: ultrahuman-biodata-assistant Version: 0.1.0 The skill is a legitimate integration for the Ultrahuman health platform, designed to fetch and summarize bio-metrics like sleep, recovery, and glucose data using the `ultrahuman_mcp` tool. It follows standard patterns for data retrieval, handles sensitive credentials (ULTRAHUMAN_TOKEN) appropriately for its purpose, and includes clear instructions to avoid providing medical advice. No evidence of malicious intent, data exfiltration, or prompt injection was found in SKILL.md or the reference files.