oura-analytics
Pass
Audited by Gen Agent Trust Hub on Nov 8, 2026
Risk Level: SAFE
Full Analysis
- [EXTERNAL_DOWNLOADS]: The skill fetches health metrics from Oura's official Cloud API (
api.ouraring.com) and sends automated notifications via the Telegram Bot API (api.telegram.org). These connections are for intended functional purposes. - [COMMAND_EXECUTION]: Provides a suite of local Python scripts to synchronize API data, calculate recovery baselines, and generate formatted health reports. These scripts are executed by the agent to perform analysis.
- [CREDENTIALS_UNSAFE]: Authentication for the Oura and Telegram APIs is handled via environment variables (
OURA_API_TOKEN,TELEGRAM_BOT_TOKEN). The documentation correctly instructs the user on how to securely manage these tokens in local configuration files rather than hardcoding them. - [DATA_EXFILTRATION]: Manages sensitive personal health information with a focus on local storage. The skill stores data in
~/.oura-analytics/and includes a data management CLI to facilitate local exports or clearing the cache for privacy.
Audit Metadata