← Back to Skills Marketplace
TCM Prescription API
by
Phal studio
· GitHub ↗
· v1.0.5
· MIT-0
110
Downloads
0
Stars
0
Active Installs
6
Versions
Install in OpenClaw
/install tcm-prescription-api
Description
中医药方剂API查询技能。通过HTTP API查询中医药方剂数据库中的方剂资料。支持方剂搜索、方剂详情查看、分类浏览、症状推荐等功能。This skill should be used when the user mentions: 查方剂、搜索方剂、方剂详情、中药方、方剂分类、症状推荐方剂、中医药方查询、方剂数...
Usage Guidance
This skill appears to do what it says (query a prescriptions API) but take these precautions before installing or using it: 1) Verify the API endpoint and publisher: the service is addressed by a raw IP (https://119.91.226.122) rather than a domain — confirm you trust that host and the developer (email listed is [email protected]). 2) Be aware of the declared mismatch: SKILL.md and the script expect TCM_API_KEY, but the registry metadata did not list required env vars; treat the API key as a secret and only set it in a safe environment variable for testing. 3) Consider privacy: queries may include sensitive health information that will be sent to the remote host. 4) Test with no API key first (search/detail endpoints are documented as public) and monitor network requests (or use a dedicated sandbox) to confirm expected behavior. 5) If you need higher assurance, ask the publisher for a canonical domain, HTTPS certificate info, and proof of reputation, or avoid installing the skill until its origin and host are validated.
Capability Analysis
Type: OpenClaw Skill
Name: tcm-prescription-api
Version: 1.0.5
The skill provides a legitimate interface for querying a Traditional Chinese Medicine (TCM) prescription database via a REST API (hosted at 119.91.226.122). The implementation in `scripts/query_prescriptions.sh` follows security best practices by using environment variables for API keys and employing Python-based URL encoding and JSON construction to safely handle user inputs, mitigating shell injection risks. The instructions in `SKILL.md` are well-aligned with the stated purpose and do not contain any prompt-injection or exfiltration attempts.
Capability Tags
Capability Assessment
Purpose & Capability
The name/description match the implementation: the SKILL.md and included script call a prescriptions API and provide search/detail/recommend functions. However, SKILL.md (metadata.clawdbot.requires.envs) and the scripts expect an environment variable TCM_API_KEY for authenticated endpoints, while the registry summary lists no required env vars/primary credential — this inconsistency is notable.
Instruction Scope
Runtime instructions are narrowly scoped to building and running curl requests against the stated API and formatting JSON with python3. The SKILL.md explicitly instructs using an env var for API key (and not to ask users to paste keys), and does not direct reading unrelated local files or secrets. It does instruct the agent to invoke shell commands (curl/python3) which is expected for this skill.
Install Mechanism
No install spec — instruction-only with a small helper script. No third-party downloads or archive extraction. This lowers risk. The included script is readable and uses standard tools (curl, python3).
Credentials
The skill requires an API key (TCM_API_KEY) to access the 'recommend' endpoint and SKILL.md includes instructions to set one, yet the registry metadata reported to you listed no required env vars / primary credential. That mismatch reduces transparency. Also the skill will send any query contents (potentially sensitive health info) to the remote service; this is expected for the purpose but worth noting as a privacy consideration.
Persistence & Privilege
The skill does not request 'always: true', does not modify other skills or system-wide settings, and is user-invocable. It does not persist credentials itself; it relies on the environment variable TCM_API_KEY as described.
How to Use
- Make sure OpenClaw is installed (local or Docker)
- Run the install command in chat:
/install tcm-prescription-api - After installation, invoke the skill by name or use
/tcm-prescription-api - Provide required inputs per the skill's parameter spec and get structured output
Version History
v1.0.5
Fix: use https://119.91.226.122 as API base URL (HTTPS with IP) to resolve connectivity test failure
v1.0.4
Use HTTPS domain tcm-prescription.cloud instead of HTTP IP address, resolve plaintext transmission warning
v1.0.3
Security: fix command injection in query_prescriptions.sh by using stdin pipe instead of string interpolation for python3 calls
v1.0.2
Security: use environment variable for API key, remove chat-paste instructions, declare TCM_API_KEY in metadata
v1.0.1
Fix: remove hardcoded API key pattern from documentation to resolve static analysis warning
v1.0.0
Initial release: prescription search, detail, categories, symptom-based recommendation
Metadata
Frequently Asked Questions
What is TCM Prescription API?
中医药方剂API查询技能。通过HTTP API查询中医药方剂数据库中的方剂资料。支持方剂搜索、方剂详情查看、分类浏览、症状推荐等功能。This skill should be used when the user mentions: 查方剂、搜索方剂、方剂详情、中药方、方剂分类、症状推荐方剂、中医药方查询、方剂数... It is an AI Agent Skill for Claude Code / OpenClaw, with 110 downloads so far.
How do I install TCM Prescription API?
Run "/install tcm-prescription-api" in the OpenClaw or Claude Code chat to install it in one step — no extra setup required.
Is TCM Prescription API free?
Yes, TCM Prescription API is completely free, licensed under MIT-0. You can download, install and use it at no cost.
Which platforms does TCM Prescription API support?
TCM Prescription API is cross-platform and runs anywhere OpenClaw / Claude Code is available (cross-platform).
Who created TCM Prescription API?
It is built and maintained by Phal studio (@slamw); the current version is v1.0.5.
More Skills