ClawHub

Oura Ring Analytics

v1.0.0

Oura Ring data integration and analytics. Fetch sleep scores, readiness, activity, HRV, and trends from the Oura Cloud API. Generate automated reports, correlations with productivity, and trigger-based alerts for low recovery days. Requires OURA_API_TOKEN (get at cloud.ouraring.com).

⭐ 7· 2.8k·3 current·3 all-time
by@kesslerio
MIT-0
Download zip
LicenseMIT-0 · Free to use, modify, and redistribute. No attribution required.
Security Scan
VirusTotalVirusTotal
Benign
View report →
OpenClawOpenClaw
Benign
high confidence
✓
Purpose & Capability
Name/description match the implementation: Python scripts implement an Oura API client, analysis, reporting, and Telegram-based alerts. Declared requirement (python3 + OURA_API_TOKEN) is appropriate. Optional env vars (TELEGRAM_BOT_TOKEN / TELEGRAM_CHAT_ID / USER_TIMEZONE / OURA_OUTPUT_DIR) are consistent with alerting, timezone handling, and output location. Minor note: registry lists source as unknown but SKILL.md metadata and README reference a GitHub repo; you may want to verify the upstream repo before installing.
✓
Instruction Scope
SKILL.md instructs running included Python scripts, setting OURA_API_TOKEN, and optionally configuring cron jobs that run local scripts. The runtime instructions reference only the declared env vars and local paths; they do not instruct reading unrelated system files or exfiltrating data. The cron examples invoke OpenClaw gateway commands and local shell scripts — normal for automation, but you should replace placeholder paths and chat IDs before use.
✓
Install Mechanism
No install spec is provided (instruction-only from the registry), but the package does include many Python script files and a requirements.txt (pytz, pyyaml). There are no remote download/install actions or obscure URLs in the install metadata. Installation advice in README (git clone + pip install -r requirements.txt) is standard and proportional.
✓
Credentials
The only required env var is OURA_API_TOKEN, which is necessary for the Oura Cloud API. Optional Telegram tokens/IDs are reasonable for alert delivery. One small concern to review: README suggests creating a token with 'select all scopes' — you should create/limit the token to the minimal read scopes required by the skill if Oura supports scoping. The README and SECURITY.md offer multiple storage suggestions (e.g., ~/.openclaw/.env, systemd user secrets); follow your own secret management policies.
✓
Persistence & Privilege
The skill does not request always:true and does not modify other skills or global agent configs. It stores cached data and reports under ~/.oura-analytics (or OURA_OUTPUT_DIR), which is expected for this functionality. The skill can be invoked autonomously by the agent (default platform behavior); combine that with your agent policies if you want to restrict automatic runs.
Assessment
This package appears to be a legitimate Oura data client and analytics tool. Before installing, verify the upstream repository (SKILL.md points to a GitHub repo) and inspect the code yourself if you can. When creating the Oura personal access token, grant the minimum read scopes necessary rather than 'all scopes.' Protect your tokens (do not commit them to git); the skill stores data locally under ~/.oura-analytics — clear or encrypt this if you are concerned about sensitive health data. If you use Telegram alerts, know that a Telegram bot token and chat ID are required and will be used to send messages. Finally, if you do not want the agent to run this skill autonomously, configure the agent/skill permissions accordingly.

Like a lobster shell, security has layers — review code before you run it.

latestvk976nmn2nwhgkwbj88s0he4gz98085ha

License

MIT-0
Free to use, modify, and redistribute. No attribution required.
Termshttps://spdx.org/licenses/MIT-0.html

Runtime requirements

Binspython3
EnvOURA_API_TOKEN

Comments