← Back to Skills Marketplace
kittenyang

CareMax Members

by Qitao Yang · GitHub ↗ · v1.0.0 · MIT-0
cross-platform ⚠ suspicious
98
Downloads
0
Stars
0
Active Installs
1
Versions
Install in OpenClaw
/install caremax-members
Description
Manage family members in CareMax Health. Use when a user asks about family health tracking, switching between family member profiles, or viewing another fami...
README (SKILL.md)

CareMax Family Members

Requires caremax-auth as a sibling directory (../caremax-auth/). If missing, tell the user to install caremax-auth first (e.g. npx skills add KittenYang/caremax-skills).

List and work with family member profiles. CareMax supports tracking health data for multiple family members.

Prerequisites — Auto-Auth (MANDATORY)

APICALL="bash ../caremax-auth/scripts/api-call.sh"

If api-call.sh returns {"error":"no_credentials",...}immediately run bash ../caremax-auth/scripts/auth-flow.sh [base_url] in background (from this skill’s root). If the user specified a custom URL, pass it as the argument.

List Members

$APICALL GET /api/skill/members

Response: {"members":[{"id":"...","name":"...","gender":"...","relationship":"self","is_default":1},...]}

Using memberId in Other Queries

Pass memberId to scope queries to a specific family member:

# Indicators for a specific member
$APICALL GET "/api/skill/indicators?memberId=xxx"

# Records for a specific member
$APICALL POST /api/skill/records/query '{"memberId":"xxx"}'

# Search for a specific member
$APICALL POST /api/skill/records/search '{"query":"血常规","memberId":"xxx"}'

Recommended Workflow

"show my wife's blood sugar":

# 1. Find spouse member
$APICALL GET /api/skill/members
# 2. Get indicators for that member (extract spouse's id)
$APICALL GET "/api/skill/indicators?memberId={spouse_id}"
# 3. Get trend for blood sugar indicator
$APICALL GET "/api/skill/indicators/trend?id={indicator_uuid}"

Notes

  • Every account has a default member (is_default: 1 = the user themselves)
  • If no memberId specified, queries return data for the default member
  • relationship values: self, spouse, child, parent, sibling, other
Usage Guidance
This skill appears to be what it claims (managing family members), but it implicitly requires and will execute scripts from a sibling package (../caremax-auth) that are not declared in the skill metadata. Before installing or running the skill: 1) Verify the source of the caremax-auth package and install it explicitly from a trusted origin. 2) Inspect ../caremax-auth/scripts/api-call.sh and auth-flow.sh to see what network endpoints they call, how credentials are obtained/stored, and whether they prompt for input. 3) Ask the skill author to declare caremax-auth as a dependency and to document the auth flow and any credential storage locations. 4) Refuse automatic background auth flows unless you understand and consent to what they do; prefer a workflow that prompts the user before starting network-authentication processes. If you cannot inspect or verify the sibling scripts, treat this skill as higher risk and avoid granting it access to live credentials or systems.
Capability Analysis
Type: OpenClaw Skill Name: caremax-members Version: 1.0.0 The skill bundle exhibits a potential shell injection vulnerability by instructing the AI agent to execute shell scripts from a sibling directory with user-provided arguments. Specifically, SKILL.md directs the agent to run 'bash ../caremax-auth/scripts/auth-flow.sh [base_url]' using a potentially unsanitized URL provided by the user, which could lead to arbitrary command execution. While these actions are plausibly required for the skill's stated purpose of managing health data, the pattern of executing external scripts with direct parameter passing is a high-risk behavior.
Capability Assessment
Purpose & Capability
The skill's description (manage family/family-member data in CareMax) matches the API calls shown. However, it mandates a sibling dependency ('../caremax-auth') for authentication that is not declared in the registry metadata. Requiring an auth helper is reasonable, but the dependency should be explicitly declared so users know what's needed and where code will be executed from.
Instruction Scope
SKILL.md instructs the agent to execute ../caremax-auth/scripts/api-call.sh and, if missing credentials, to immediately run ../caremax-auth/scripts/auth-flow.sh in the background. This directs the agent to execute arbitrary scripts in a relative path outside the skill's own files and to autonomously start an auth flow — both of which are outside the narrow 'list/switch family members' description and could trigger network calls, credential storage, or other side effects without further disclosure.
Install Mechanism
There is no install spec and no code files in this skill itself (instruction-only), so nothing is installed by the skill package. The execution risk comes from calling sibling scripts, not from an install mechanism in this skill.
Credentials
The skill declares no required environment variables or credentials, yet it depends on external auth scripts which presumably manage credentials. Because those credential requirements are hidden (not declared in requires.env or primaryEnv), the skill's metadata understates the sensitive access it needs. That mismatch reduces transparency about what secrets or accounts will be used.
Persistence & Privilege
always:false and no special OS restrictions — the skill itself does not request permanent inclusion. However, the instruction to 'immediately run ... auth-flow.sh' in the background could create a persistent process or auth state on disk (depending on what the sibling script does). The skill does not declare that behavior in metadata.
How to Use
  1. Make sure OpenClaw is installed (local or Docker)
  2. Run the install command in chat: /install caremax-members
  3. After installation, invoke the skill by name or use /caremax-members
  4. Provide required inputs per the skill's parameter spec and get structured output
Version History
v1.0.0
Initial publish to ClawHub
Metadata
Slug caremax-members
Version 1.0.0
License MIT-0
All-time Installs 0
Active Installs 0
Total Versions 1
Frequently Asked Questions

What is CareMax Members?

Manage family members in CareMax Health. Use when a user asks about family health tracking, switching between family member profiles, or viewing another fami... It is an AI Agent Skill for Claude Code / OpenClaw, with 98 downloads so far.

How do I install CareMax Members?

Run "/install caremax-members" in the OpenClaw or Claude Code chat to install it in one step — no extra setup required.

Is CareMax Members free?

Yes, CareMax Members is completely free, licensed under MIT-0. You can download, install and use it at no cost.

Which platforms does CareMax Members support?

CareMax Members is cross-platform and runs anywhere OpenClaw / Claude Code is available (cross-platform).

Who created CareMax Members?

It is built and maintained by Qitao Yang (@kittenyang); the current version is v1.0.0.

💬 Comments