oura-analytics

Pass

Audited by Gen Agent Trust Hub on Mar 1, 2026

Risk Level: SAFE
Full Analysis
  • [COMMAND_EXECUTION]: The skill executes local Python scripts and shell commands to perform data analytics, generate reports, and schedule tasks via cron jobs. These operations are confined to the local environment and the specific scripts provided within the skill.
  • [CREDENTIALS_UNSAFE]: The skill documentation and examples correctly instruct users to use environment variables (OURA_API_TOKEN, TELEGRAM_BOT_TOKEN) rather than hardcoding sensitive credentials. No hardcoded secrets or keys were detected.
  • [DATA_EXFILTRATION]: While the skill communicates with external services (Oura Cloud API and Telegram), these operations are limited to the intended functionality of fetching health metrics and sending user-configured notifications. No unauthorized network activity or suspicious data transmission was found.
Audit Metadata
Risk Level
SAFE
Analyzed
Mar 1, 2026, 05:14 AM