oura-analytics
Pass
Audited by Gen Agent Trust Hub on Jun 18, 2026
Risk Level: SAFE
Full Analysis
- [SAFE]: The skill facilitates data retrieval from official Oura Ring API endpoints (api.ouraring.com) and supports optional notifications via the Telegram Bot API (api.telegram.org). These are well-known technology services.
- [SAFE]: Sensitive information such as the Oura API token and Telegram bot token are handled via environment variables (OURA_API_TOKEN, TELEGRAM_BOT_TOKEN), adhering to secure credential management practices.
- [SAFE]: Local data management is transparent, with metrics cached in the user's home directory (~/.oura-analytics/) and clear instructions provided for data export and deletion.
- [SAFE]: The skill uses a minimal set of well-known dependencies (pytz, pyyaml) and avoids external HTTP libraries by utilizing Python's built-in urllib.request for network operations.
- [SAFE]: No evidence of prompt injection, obfuscation, or unauthorized persistence mechanisms was found in the skill's instructions or scripts.
Audit Metadata