← 返回 Skills 市场
kittenyang

CareMax Members

作者 Qitao Yang · GitHub ↗ · v1.0.0 · MIT-0
cross-platform ⚠ suspicious
98
总下载
0
收藏
0
当前安装
1
版本数
在 OpenClaw 中安装
/install caremax-members
功能描述
Manage family members in CareMax Health. Use when a user asks about family health tracking, switching between family member profiles, or viewing another fami...
使用说明 (SKILL.md)

CareMax Family Members

Requires caremax-auth as a sibling directory (../caremax-auth/). If missing, tell the user to install caremax-auth first (e.g. npx skills add KittenYang/caremax-skills).

List and work with family member profiles. CareMax supports tracking health data for multiple family members.

Prerequisites — Auto-Auth (MANDATORY)

APICALL="bash ../caremax-auth/scripts/api-call.sh"

If api-call.sh returns {"error":"no_credentials",...}immediately run bash ../caremax-auth/scripts/auth-flow.sh [base_url] in background (from this skill’s root). If the user specified a custom URL, pass it as the argument.

List Members

$APICALL GET /api/skill/members

Response: {"members":[{"id":"...","name":"...","gender":"...","relationship":"self","is_default":1},...]}

Using memberId in Other Queries

Pass memberId to scope queries to a specific family member:

# Indicators for a specific member
$APICALL GET "/api/skill/indicators?memberId=xxx"

# Records for a specific member
$APICALL POST /api/skill/records/query '{"memberId":"xxx"}'

# Search for a specific member
$APICALL POST /api/skill/records/search '{"query":"血常规","memberId":"xxx"}'

Recommended Workflow

"show my wife's blood sugar":

# 1. Find spouse member
$APICALL GET /api/skill/members
# 2. Get indicators for that member (extract spouse's id)
$APICALL GET "/api/skill/indicators?memberId={spouse_id}"
# 3. Get trend for blood sugar indicator
$APICALL GET "/api/skill/indicators/trend?id={indicator_uuid}"

Notes

  • Every account has a default member (is_default: 1 = the user themselves)
  • If no memberId specified, queries return data for the default member
  • relationship values: self, spouse, child, parent, sibling, other
安全使用建议
This skill appears to be what it claims (managing family members), but it implicitly requires and will execute scripts from a sibling package (../caremax-auth) that are not declared in the skill metadata. Before installing or running the skill: 1) Verify the source of the caremax-auth package and install it explicitly from a trusted origin. 2) Inspect ../caremax-auth/scripts/api-call.sh and auth-flow.sh to see what network endpoints they call, how credentials are obtained/stored, and whether they prompt for input. 3) Ask the skill author to declare caremax-auth as a dependency and to document the auth flow and any credential storage locations. 4) Refuse automatic background auth flows unless you understand and consent to what they do; prefer a workflow that prompts the user before starting network-authentication processes. If you cannot inspect or verify the sibling scripts, treat this skill as higher risk and avoid granting it access to live credentials or systems.
功能分析
Type: OpenClaw Skill Name: caremax-members Version: 1.0.0 The skill bundle exhibits a potential shell injection vulnerability by instructing the AI agent to execute shell scripts from a sibling directory with user-provided arguments. Specifically, SKILL.md directs the agent to run 'bash ../caremax-auth/scripts/auth-flow.sh [base_url]' using a potentially unsanitized URL provided by the user, which could lead to arbitrary command execution. While these actions are plausibly required for the skill's stated purpose of managing health data, the pattern of executing external scripts with direct parameter passing is a high-risk behavior.
能力评估
Purpose & Capability
The skill's description (manage family/family-member data in CareMax) matches the API calls shown. However, it mandates a sibling dependency ('../caremax-auth') for authentication that is not declared in the registry metadata. Requiring an auth helper is reasonable, but the dependency should be explicitly declared so users know what's needed and where code will be executed from.
Instruction Scope
SKILL.md instructs the agent to execute ../caremax-auth/scripts/api-call.sh and, if missing credentials, to immediately run ../caremax-auth/scripts/auth-flow.sh in the background. This directs the agent to execute arbitrary scripts in a relative path outside the skill's own files and to autonomously start an auth flow — both of which are outside the narrow 'list/switch family members' description and could trigger network calls, credential storage, or other side effects without further disclosure.
Install Mechanism
There is no install spec and no code files in this skill itself (instruction-only), so nothing is installed by the skill package. The execution risk comes from calling sibling scripts, not from an install mechanism in this skill.
Credentials
The skill declares no required environment variables or credentials, yet it depends on external auth scripts which presumably manage credentials. Because those credential requirements are hidden (not declared in requires.env or primaryEnv), the skill's metadata understates the sensitive access it needs. That mismatch reduces transparency about what secrets or accounts will be used.
Persistence & Privilege
always:false and no special OS restrictions — the skill itself does not request permanent inclusion. However, the instruction to 'immediately run ... auth-flow.sh' in the background could create a persistent process or auth state on disk (depending on what the sibling script does). The skill does not declare that behavior in metadata.
如何使用
  1. 确保已安装 OpenClaw(本地或 Docker 部署)
  2. 在对话框中输入安装命令:/install caremax-members
  3. 安装完成后,直接呼叫该 Skill 的名称或使用 /caremax-members 触发
  4. 根据 Skill 的参数说明提供必要输入,即可获得结构化输出
版本历史
v1.0.0
Initial publish to ClawHub
元数据
Slug caremax-members
版本 1.0.0
许可证 MIT-0
累计安装 0
当前安装数 0
历史版本数 1
常见问题

CareMax Members 是什么?

Manage family members in CareMax Health. Use when a user asks about family health tracking, switching between family member profiles, or viewing another fami... 它是一个面向 Claude Code / OpenClaw 的 AI Agent Skill 插件,目前累计下载 98 次。

如何安装 CareMax Members?

在 OpenClaw 或 Claude Code 对话框中运行命令「/install caremax-members」即可一键安装,无需额外配置。

CareMax Members 是免费的吗?

是的,CareMax Members 完全免费,采用 MIT-0 许可证,可自由下载、安装和使用。

CareMax Members 支持哪些平台?

CareMax Members 跨平台运行,可在任意部署了 OpenClaw / Claude Code 的环境中使用(cross-platform)。

谁开发了 CareMax Members?

由 Qitao Yang(@kittenyang)开发并维护,当前版本 v1.0.0。

💬 留言讨论