← 返回 Skills 市场
Healthie
作者
aiwithabidi
· GitHub ↗
· v1.0.0
366
总下载
0
收藏
0
当前安装
1
版本数
在 OpenClaw 中安装
/install healthie
功能描述
Healthie — manage patients, appointments, goals, and documents via GraphQL API
使用说明 (SKILL.md)
🏥 Healthie
Healthie — manage patients, appointments, goals, and documents via GraphQL API
Requirements
| Variable | Required | Description |
|---|---|---|
HEALTHIE_API_KEY |
✅ | API key from Healthie developer settings |
Quick Start
# List patients
python3 {{baseDir}}/scripts/healthie.py patients --offset \x3Cvalue> --keywords \x3Cvalue>
# Get patient
python3 {{baseDir}}/scripts/healthie.py patient-get id \x3Cvalue>
# Create patient
python3 {{baseDir}}/scripts/healthie.py patient-create --first_name \x3Cvalue> --last_name \x3Cvalue> --email \x3Cvalue>
# List appointments
python3 {{baseDir}}/scripts/healthie.py appointments --provider_id \x3Cvalue>
# Get appointment
python3 {{baseDir}}/scripts/healthie.py appointment-get id \x3Cvalue>
# Create appointment
python3 {{baseDir}}/scripts/healthie.py appointment-create --patient_id \x3Cvalue> --provider_id \x3Cvalue> --datetime \x3Cvalue>
# Delete appointment
python3 {{baseDir}}/scripts/healthie.py appointment-delete id \x3Cvalue>
# List appointment types
python3 {{baseDir}}/scripts/healthie.py appointment-types
All Commands
| Command | Description |
|---|---|
patients |
List patients |
patient-get |
Get patient |
patient-create |
Create patient |
appointments |
List appointments |
appointment-get |
Get appointment |
appointment-create |
Create appointment |
appointment-delete |
Delete appointment |
appointment-types |
List appointment types |
providers |
List providers |
goals |
List goals |
goal-create |
Create goal |
documents |
List documents |
forms |
List forms |
tags |
List tags |
Output Format
All commands output JSON by default. Add --human for readable formatted output.
python3 {{baseDir}}/scripts/healthie.py \x3Ccommand> --human
Script Reference
| Script | Description |
|---|---|
{{baseDir}}/scripts/healthie.py |
Main CLI — all commands in one tool |
Credits
Built by M. Abidi | agxntsix.ai YouTube | GitHub Part of the AgxntSix Skill Suite for OpenClaw agents.
📅 Need help setting up OpenClaw for your business? Book a free consultation
安全使用建议
This skill appears to be a straightforward Healthie API client and only needs your HEALTHIE_API_KEY. Before installing: (1) Confirm you trust the owner/homepage (agxntsix.ai) and that this is the intended Healthie integration. (2) Prefer setting HEALTHIE_API_KEY in the environment rather than relying on a ~/.openclaw/workspace/.env file (the script will read that file as a fallback). (3) Limit the API key's permissions to the minimum required and avoid using a highly privileged key that could expose PHI. (4) Note the SKILL.md claims GraphQL but the script uses REST endpoints—verify this matches the Healthie API you expect. (5) If handling real patient data, run the tool in a controlled environment and review network activity to ensure requests go only to the expected api.gethealthie.com host.
功能分析
Type: OpenClaw Skill
Name: healthie
Version: 1.0.0
The `scripts/healthie.py` file contains a Server-Side Request Forgery (SSRF) vulnerability. The `req` function allows arbitrary URLs if the `path` argument starts with 'http'. User-supplied arguments, such as `id` in `cmd_patient_get`, are directly embedded into the `path` without validation. This allows an attacker to craft a malicious `id` (e.g., `http://attacker.com/exfil`) which will cause the skill to send the `HEALTHIE_API_KEY` in the `Authorization` header to an external, attacker-controlled endpoint, leading to credential exfiltration.
能力评估
Purpose & Capability
The skill claims to manage patients/appointments via a Healthie API and requires HEALTHIE_API_KEY — which matches the included CLI implementation that talks to https://api.gethealthie.com. Minor mismatch: SKILL.md and metadata mention a GraphQL API, but the script uses REST-style endpoints (e.g., /users, /appointments) rather than sending GraphQL queries to /graphql. This is likely an implementation description mismatch, not a security issue.
Instruction Scope
SKILL.md simply instructs running the provided Python script. The script makes outbound HTTPS requests to api.gethealthie.com (expected). It also attempts to read a .env file from WORKSPACE or ~/.openclaw/workspace/.env to obtain the HEALTHIE_API_KEY if the env var is not set. The README does not document this .env fallback or the WORKSPACE env var; reading that file is limited to extracting the requested key, but it does mean the script can read a file in the user's home directory.
Install Mechanism
No install spec; this is an instruction-only skill with a bundled Python script. No additional packages or downloads are performed.
Credentials
Only HEALTHIE_API_KEY is declared/required, which is proportionate for an API client. However, the script also reads the WORKSPACE env var (if present) and a .env file path as a fallback; WORKSPACE is not declared in requires.env. The script does not request any other unrelated credentials.
Persistence & Privilege
The skill does not request always: true and does not modify other skills or system-wide settings. It runs as a normal, user-invoked CLI.
如何使用
- 确保已安装 OpenClaw(本地或 Docker 部署)
- 在对话框中输入安装命令:
/install healthie - 安装完成后,直接呼叫该 Skill 的名称或使用
/healthie触发 - 根据 Skill 的参数说明提供必要输入,即可获得结构化输出
版本历史
v1.0.0
Initial release of Healthie skill (version 1.0.0):
- Manage patients, appointments, goals, and documents with the Healthie GraphQL API.
- Offers a CLI tool for listing, creating, and managing patients, appointments, goals, providers, forms, tags, and documents.
- Outputs results in JSON or human-readable formats.
- Requires a HEALTHIE_API_KEY environment variable for authentication.
- No external dependencies; works with Python 3.10+ standard library.
元数据
常见问题
Healthie 是什么?
Healthie — manage patients, appointments, goals, and documents via GraphQL API. 它是一个面向 Claude Code / OpenClaw 的 AI Agent Skill 插件,目前累计下载 366 次。
如何安装 Healthie?
在 OpenClaw 或 Claude Code 对话框中运行命令「/install healthie」即可一键安装,无需额外配置。
Healthie 是免费的吗?
是的,Healthie 完全免费(开源免费),可自由下载、安装和使用。
Healthie 支持哪些平台?
Healthie 跨平台运行,可在任意部署了 OpenClaw / Claude Code 的环境中使用(cross-platform)。
谁开发了 Healthie?
由 aiwithabidi(@aiwithabidi)开发并维护,当前版本 v1.0.0。
推荐 Skills