← Back to Skills Marketplace
Healthie
by
aiwithabidi
· GitHub ↗
· v1.0.0
366
Downloads
0
Stars
0
Active Installs
1
Versions
Install in OpenClaw
/install healthie
Description
Healthie — manage patients, appointments, goals, and documents via GraphQL API
README (SKILL.md)
🏥 Healthie
Healthie — manage patients, appointments, goals, and documents via GraphQL API
Requirements
| Variable | Required | Description |
|---|---|---|
HEALTHIE_API_KEY |
✅ | API key from Healthie developer settings |
Quick Start
# List patients
python3 {{baseDir}}/scripts/healthie.py patients --offset \x3Cvalue> --keywords \x3Cvalue>
# Get patient
python3 {{baseDir}}/scripts/healthie.py patient-get id \x3Cvalue>
# Create patient
python3 {{baseDir}}/scripts/healthie.py patient-create --first_name \x3Cvalue> --last_name \x3Cvalue> --email \x3Cvalue>
# List appointments
python3 {{baseDir}}/scripts/healthie.py appointments --provider_id \x3Cvalue>
# Get appointment
python3 {{baseDir}}/scripts/healthie.py appointment-get id \x3Cvalue>
# Create appointment
python3 {{baseDir}}/scripts/healthie.py appointment-create --patient_id \x3Cvalue> --provider_id \x3Cvalue> --datetime \x3Cvalue>
# Delete appointment
python3 {{baseDir}}/scripts/healthie.py appointment-delete id \x3Cvalue>
# List appointment types
python3 {{baseDir}}/scripts/healthie.py appointment-types
All Commands
| Command | Description |
|---|---|
patients |
List patients |
patient-get |
Get patient |
patient-create |
Create patient |
appointments |
List appointments |
appointment-get |
Get appointment |
appointment-create |
Create appointment |
appointment-delete |
Delete appointment |
appointment-types |
List appointment types |
providers |
List providers |
goals |
List goals |
goal-create |
Create goal |
documents |
List documents |
forms |
List forms |
tags |
List tags |
Output Format
All commands output JSON by default. Add --human for readable formatted output.
python3 {{baseDir}}/scripts/healthie.py \x3Ccommand> --human
Script Reference
| Script | Description |
|---|---|
{{baseDir}}/scripts/healthie.py |
Main CLI — all commands in one tool |
Credits
Built by M. Abidi | agxntsix.ai YouTube | GitHub Part of the AgxntSix Skill Suite for OpenClaw agents.
📅 Need help setting up OpenClaw for your business? Book a free consultation
Usage Guidance
This skill appears to be a straightforward Healthie API client and only needs your HEALTHIE_API_KEY. Before installing: (1) Confirm you trust the owner/homepage (agxntsix.ai) and that this is the intended Healthie integration. (2) Prefer setting HEALTHIE_API_KEY in the environment rather than relying on a ~/.openclaw/workspace/.env file (the script will read that file as a fallback). (3) Limit the API key's permissions to the minimum required and avoid using a highly privileged key that could expose PHI. (4) Note the SKILL.md claims GraphQL but the script uses REST endpoints—verify this matches the Healthie API you expect. (5) If handling real patient data, run the tool in a controlled environment and review network activity to ensure requests go only to the expected api.gethealthie.com host.
Capability Analysis
Type: OpenClaw Skill
Name: healthie
Version: 1.0.0
The `scripts/healthie.py` file contains a Server-Side Request Forgery (SSRF) vulnerability. The `req` function allows arbitrary URLs if the `path` argument starts with 'http'. User-supplied arguments, such as `id` in `cmd_patient_get`, are directly embedded into the `path` without validation. This allows an attacker to craft a malicious `id` (e.g., `http://attacker.com/exfil`) which will cause the skill to send the `HEALTHIE_API_KEY` in the `Authorization` header to an external, attacker-controlled endpoint, leading to credential exfiltration.
Capability Assessment
Purpose & Capability
The skill claims to manage patients/appointments via a Healthie API and requires HEALTHIE_API_KEY — which matches the included CLI implementation that talks to https://api.gethealthie.com. Minor mismatch: SKILL.md and metadata mention a GraphQL API, but the script uses REST-style endpoints (e.g., /users, /appointments) rather than sending GraphQL queries to /graphql. This is likely an implementation description mismatch, not a security issue.
Instruction Scope
SKILL.md simply instructs running the provided Python script. The script makes outbound HTTPS requests to api.gethealthie.com (expected). It also attempts to read a .env file from WORKSPACE or ~/.openclaw/workspace/.env to obtain the HEALTHIE_API_KEY if the env var is not set. The README does not document this .env fallback or the WORKSPACE env var; reading that file is limited to extracting the requested key, but it does mean the script can read a file in the user's home directory.
Install Mechanism
No install spec; this is an instruction-only skill with a bundled Python script. No additional packages or downloads are performed.
Credentials
Only HEALTHIE_API_KEY is declared/required, which is proportionate for an API client. However, the script also reads the WORKSPACE env var (if present) and a .env file path as a fallback; WORKSPACE is not declared in requires.env. The script does not request any other unrelated credentials.
Persistence & Privilege
The skill does not request always: true and does not modify other skills or system-wide settings. It runs as a normal, user-invoked CLI.
How to Use
- Make sure OpenClaw is installed (local or Docker)
- Run the install command in chat:
/install healthie - After installation, invoke the skill by name or use
/healthie - Provide required inputs per the skill's parameter spec and get structured output
Version History
v1.0.0
Initial release of Healthie skill (version 1.0.0):
- Manage patients, appointments, goals, and documents with the Healthie GraphQL API.
- Offers a CLI tool for listing, creating, and managing patients, appointments, goals, providers, forms, tags, and documents.
- Outputs results in JSON or human-readable formats.
- Requires a HEALTHIE_API_KEY environment variable for authentication.
- No external dependencies; works with Python 3.10+ standard library.
Metadata
Frequently Asked Questions
What is Healthie?
Healthie — manage patients, appointments, goals, and documents via GraphQL API. It is an AI Agent Skill for Claude Code / OpenClaw, with 366 downloads so far.
How do I install Healthie?
Run "/install healthie" in the OpenClaw or Claude Code chat to install it in one step — no extra setup required.
Is Healthie free?
Yes, Healthie is completely free (open-source). You can download, install and use it at no cost.
Which platforms does Healthie support?
Healthie is cross-platform and runs anywhere OpenClaw / Claude Code is available (cross-platform).
Who created Healthie?
It is built and maintained by aiwithabidi (@aiwithabidi); the current version is v1.0.0.
More Skills