BestYou Coach Dashboards
v1.0.0Render BestYou health data as visual Dark Glass dashboards via OpenClaw canvas. Daily briefings, action plans, progress snapshots, weekly summaries, meal ana...
0· 102·0 当前·0 累计
by 安全扫描
OpenClaw
安全
high confidenceThe skill is coherent with its stated purpose: it renders BestYou health data via OpenClaw using a BestYou API key and the mcporter CLI; nothing in the package indicates unexplained or disproportionate access requests.
评估建议
What to consider before installing:
- The skill legitimately needs BESTYOU_API_KEY and uses mcporter to call the BestYou MCP service (baseUrl: https://mcp.bestyou.ai/mcp). Only provide a key you intend to use with BestYou and grant minimal scopes required.
- You will be asked to store the API key in a local config file (~/.openclaw/workspace/config/mcporter.json). That file contains the Bearer token in plaintext; secure the file (restrict permissions) and delete or rotate the key if you stop usi...详细分析 ▾
ℹ 用途与能力
Name/description, required env var (BESTYOU_API_KEY), and instructions all align: the skill fetches BestYou data via an MCP server and renders local HTML templates. One small mismatch: registry metadata lists no required config paths, but SKILL.md and INSTALL.md explicitly instruct the user to create and use ~/.openclaw/workspace/config/mcporter.json (the mcporter config). This is expected for operation but is not reflected in the declared metadata.
✓ 指令范围
SKILL.md confines runtime actions to: verifying/installing mcporter, creating a mcporter config that contains the BESTYOU API key, calling bestyou.* tools via mcporter, populating local HTML templates from assets/, inlining CSS, and presenting via canvas. The instructions do not ask the agent to read unrelated system files or other credentials. The agent will cause network requests to the BestYou MCP endpoint when mcporter calls are made.
ℹ 安装机制
This is an instruction-only skill (no install spec). It tells the user to install mcporter via `npm install -g mcporter`. That is a normal but higher-risk recommendation than using an audited system package because global npm installs run code from the npm registry — users should verify the package and version before installing.
✓ 凭证需求
Only one credential (BESTYOU_API_KEY) is required and is the declared primary credential, which is proportionate for a skill that calls the BestYou MCP API. The docs instruct storing the key in a local mcporter.json Authorization Bearer header — convenient but means the key will be present in plaintext on disk at the specified path, so users should ensure appropriate filesystem permissions and scope.
✓ 持久化与权限
always:false and user-invocable:true (default). The skill does not request permanent or elevated platform privileges and does not attempt to modify other skills or system-wide settings beyond recommending a gateway restart.
安全有层次，运行前请审查代码。
运行时依赖
无特殊依赖
版本
latestv1.0.02026/3/23
BestYou Coach 1.0.0 - Initial release of BestYou Coach for OpenClaw canvas. - Renders health data as visual dashboards: daily briefings, action plans, progress snapshots, weekly summaries, meal analysis, and workout plans. - Provides setup guidance for `mcporter` and API key configuration. - Includes data-to-template mapping and design system details for consistent rendering. - Outlines handling for missing or null API response fields. - Describes conversation patterns for typical user requests.
● 无害
安装命令 点击复制
官方npx clawhub@latest install bestyou-coach
镜像加速npx clawhub@latest install bestyou-coach --registry https://cn.clawhub-mirror.com
技能文档
Render BestYou MCP tool responses as rich visual cards using OpenClaw's canvas.
First-Time Setup
Before calling any tools, check that mcporter is installed and the BestYou server is configured:
mcporter --config ~/.openclaw/workspace/config/mcporter.json list
- If
mcporteris not found:npm install -g mcporter - If
bestyouis not listed: walk the user through setup. Seereferences/setup.mdfor the full guide.
Setup summary:
- User generates an API key in BestYou iOS (More → Connected Apps → OpenClaw)
- Create
config/mcporter.jsonwith the key in the Authorization Bearer header (seereferences/setup.mdfor the exact JSON format) - Restart the OpenClaw gateway
Calling Tools via mcporter
All tools use this syntax:
mcporter --config config/mcporter.json call bestyou. [param=value ...]
If a custom config path is needed (e.g. calling from outside the workspace), use the full path:
mcporter --config ~/.openclaw/workspace/config/mcporter.json call bestyou. [param=value ...]
Examples:
mcporter call bestyou.get_account_link_status
mcporter call bestyou.get_daily_briefing date=2026-03-15
mcporter call bestyou.get_todays_action_plan date=2026-03-15
mcporter call bestyou.get_progress_snapshot date=2026-03-15
mcporter call bestyou.get_weekly_summary weekEndDate=2026-03-15
mcporter call bestyou.generate_workout type=strength duration=20 equipment=bodyweight experienceLevel=Intermediate goal="General strength"
mcporter call bestyou.analyze_meal_text description="chicken burrito bowl" timestamp=2026-03-15T12:30:00-06:00
If a custom mcporter config path is needed, add --config .
Tool-to-Template Map
| MCP Tool | Template | Description |
|---|---|---|
get_account_link_status | assets/account-status.html | Connection status, scopes |
get_daily_briefing | assets/daily-briefing.html | Readiness, insights, priorities |
get_todays_action_plan | assets/action-plan.html | Timeline of today's blocks |
get_progress_snapshot | assets/progress-snapshot.html | Domain scores, recommendations |
get_weekly_summary | assets/weekly-summary.html | Weekly scores, trends, goals |
analyze_meal_text | assets/meal-analysis.html | Macro breakdown, components |
generate_workout | assets/workout.html | Exercise cards with images |
Rendering Workflow
- Call the BestYou MCP tool via mcporter
- Read the matching template from
assets/ - Replace the sample data in the HTML with the actual API response values (see data mapping below)
- Inline the CSS: copy the contents of
assets/shared.cssinto a