← 返回 Skills 市场
kittenyang

CareMax Records

作者 Qitao Yang · GitHub ↗ · v1.0.0 · MIT-0
cross-platform ⚠ suspicious
106
总下载
0
收藏
0
当前安装
1
版本数
在 OpenClaw 中安装
/install caremax-records
功能描述
Query and search medical records from CareMax Health API. Supports structured query, AI-powered semantic search with RAG (natural language answers with citat...
使用说明 (SKILL.md)

CareMax Medical Records

Requires caremax-auth as a sibling directory (../caremax-auth/). If missing, tell the user to install caremax-auth first (e.g. npx skills add KittenYang/caremax-skills).

Prerequisites — Auto-Auth (MANDATORY)

APICALL="bash ../caremax-auth/scripts/api-call.sh"

If api-call.sh returns {"error":"no_credentials",...}immediately run bash ../caremax-auth/scripts/auth-flow.sh [base_url] (from this skill’s root).

Smart Search (Recommended)

Use searchText for natural language queries. Backend runs 4-layer search:

  1. LLM keyword extraction (maps "喝酒" → "ALDH2 酒精代谢")
  2. LIKE search on report titles, summaries, sections, indicators
  3. Semantic vector search (BGE-M3 → Zilliz)
  4. RAG: DeepSeek-V3.2 generates natural language answer with citations
$APICALL POST /api/skill/records/query '{"searchText":"我有哪个基因不能喝酒"}'
$APICALL POST /api/skill/records/query '{"searchText":"我猝死的概率大吗"}'
$APICALL POST /api/skill/records/query '{"searchText":"降压药建议"}'
$APICALL POST /api/skill/records/query '{"searchText":"MTHFR"}'

Response:

{
  "type": "search",
  "query": "...",
  "data": [...],              // matched records (enriched)
  "totalCount": 1,
  "semanticHits": [           // vector similarity top-10
    {"text": "...", "score": 0.61, "recordId": "xxx"}
  ],
  "rag": {                    // AI natural language answer
    "answer": "根据您的基因检测报告...[来源1][来源2]",
    "citations": [
      {"index": 1, "source": "脑梗塞风险评估", "relevance": "高"}
    ]
  }
}

Display the rag.answer to the user. It contains the direct answer with citation references.

Structured Query

# By date range
$APICALL POST /api/skill/records/query '{"dateRange":["2025-01-01","2025-12-31"]}'

# By indicator name
$APICALL POST /api/skill/records/query '{"indicatorName":"血红蛋白"}'

# By report title
$APICALL POST /api/skill/records/query '{"reportTitle":"血常规"}'

# By record ID (single record detail)
$APICALL POST /api/skill/records/query '{"recordId":"uuid"}'

# By member + pagination
$APICALL POST /api/skill/records/query '{"memberId":"member-uuid","page":1,"limit":20}'

Report Types

The system handles multiple report types:

  • lab: Standard lab reports (indicators with name/value/unit/reference_range)
  • genetic: Gene testing reports (sections with gene/SNP/genotype/risk_level)
  • imaging: Radiology reports (sections with location/finding/impression)
  • pathology: Pathology reports (sections with tissue/grade/staging)
  • other: Any other medical document

Non-lab reports have report_type, summary, and sections[] fields instead of indicators[].

AI 对话(推荐)

使用 /api/skill/chat 进行 AI 对话。所有对话自动保存到历史记录。

# 提问(自动搜索 + RAG + 保存历史)
$APICALL POST /api/skill/chat '{"question":"我有哪个基因不能喝酒"}'
$APICALL POST /api/skill/chat '{"question":"我的降压药应该怎么吃"}'

# 针对某份报告提问
$APICALL POST /api/skill/chat '{"question":"这份报告有什么建议","recordId":"uuid"}'

Response:

{
  "id": "chat-uuid",
  "question": "...",
  "answer": "根据您的报告...[来源1]",
  "citations": [{"index":1,"source":"...","relevance":"高","quote":"原文..."}],
  "recordId": null,
  "created_at": "..."
}

Display the answer to the user. Citations contain original report text.

# 获取历史记录
$APICALL GET /api/skill/chat/history

# 删除单条
$APICALL DELETE /api/skill/chat/\x3Cchat_id>

# 清空所有
$APICALL DELETE /api/skill/chat

Recommended Workflow

User: "我的基因检测报告说了什么"

$APICALL POST /api/skill/chat '{"question":"我的基因检测报告说了什么"}'

User: "show my recent check-up results"

$APICALL POST /api/skill/records/query '{"dateRange":["2025-01-01","2025-06-30"]}'

User: "我的降压药应该怎么吃"

$APICALL POST /api/skill/chat '{"question":"我的降压药应该怎么吃"}'
安全使用建议
Do not install or run this skill until you verify the external auth package it requires (../caremax-auth). The SKILL.md mandates running sibling scripts that will perform authentication and API calls — those scripts could prompt for, store, or transmit sensitive credentials and medical data. Ask the publisher for a source URL or repository, inspect the caremax-auth/scripts (especially auth-flow.sh and api-call.sh) to see where credentials are read, stored, or sent, and confirm the API base_url and hostname are legitimate and HIPAA-compliant if you will handle PHI. If you cannot inspect the sibling repository, avoid using this skill with real patient data; test only with synthetic data and consider requiring explicit declaration of required env vars (API keys, base_url) before trusting it.
功能分析
Type: OpenClaw Skill Name: caremax-records Version: 1.0.0 The skill manages sensitive medical and genetic records by instructing the AI agent to execute external bash scripts (`api-call.sh` and `auth-flow.sh`) located in a sibling directory (`../caremax-auth/`). This reliance on shell execution for authentication and API interaction introduces a significant risk of shell injection and depends on the integrity of external files outside the bundle's control. While the behavior aligns with the stated purpose of querying health data, the use of local script execution for network requests is a high-risk pattern (SKILL.md).
能力评估
Purpose & Capability
The skill claims to query CareMax Health API and all SKILL.md examples call an API endpoint; that fits the stated purpose. However, the skill does not declare any required credentials or a primaryEnv even though it requires authenticated access via a sibling repo (../caremax-auth). The external dependency is coherent with the purpose but should have been declared and linked.
Instruction Scope
Runtime instructions require executing scripts in a sibling directory (../caremax-auth/scripts/api-call.sh and auth-flow.sh). Those external scripts are mandatory and run shell commands, may prompt for or store credentials, and are outside the visibility of this skill bundle. The SKILL.md also instructs forwarding user medical queries to a remote API and saving chats remotely — expected for this skill but high-risk for PHI if endpoints or auth are not verified.
Install Mechanism
There is no install spec and no code files in this skill (instruction-only). That reduces the immediate attack surface in the skill itself, but the mandatory dependency on an out-of-tree sibling package (caremax-auth) shifts risk to that external code.
Credentials
The skill lists no required environment variables or primary credential, yet the SKILL.md implicitly depends on authentication performed by ../caremax-auth. For a medical-records integration it is unusual and concerning not to declare what credentials or base_url will be used; the auth scripts could access or request arbitrary secrets.
Persistence & Privilege
The skill does not request 'always: true' or other elevated persistent privileges and remains user-invocable. It does not declare modifying other skill configs. Autonomous invocation is allowed (platform default) but not by itself a new concern here.
如何使用
  1. 确保已安装 OpenClaw(本地或 Docker 部署)
  2. 在对话框中输入安装命令:/install caremax-records
  3. 安装完成后,直接呼叫该 Skill 的名称或使用 /caremax-records 触发
  4. 根据 Skill 的参数说明提供必要输入,即可获得结构化输出
版本历史
v1.0.0
Initial publish to ClawHub
元数据
Slug caremax-records
版本 1.0.0
许可证 MIT-0
累计安装 0
当前安装数 0
历史版本数 1
常见问题

CareMax Records 是什么?

Query and search medical records from CareMax Health API. Supports structured query, AI-powered semantic search with RAG (natural language answers with citat... 它是一个面向 Claude Code / OpenClaw 的 AI Agent Skill 插件,目前累计下载 106 次。

如何安装 CareMax Records?

在 OpenClaw 或 Claude Code 对话框中运行命令「/install caremax-records」即可一键安装,无需额外配置。

CareMax Records 是免费的吗?

是的,CareMax Records 完全免费,采用 MIT-0 许可证,可自由下载、安装和使用。

CareMax Records 支持哪些平台?

CareMax Records 跨平台运行,可在任意部署了 OpenClaw / Claude Code 的环境中使用(cross-platform)。

谁开发了 CareMax Records?

由 Qitao Yang(@kittenyang)开发并维护,当前版本 v1.0.0。

💬 留言讨论