← 返回 Skills 市场

건강보험심사평가원 병원 검색

Name: 건강보험심사평가원 병원 검색
Author: sw326

作者 김성우 · GitHub ↗ · v3.2.0

cross-platform ⚠ suspicious

589

总下载

当前安装

版本数

在 OpenClaw 中安装

/install hira-hospital

功能描述

HIRA hospital information search API

使用说明 (SKILL.md)

Hospital Info Skill

HIRA (Health Insurance Review & Assessment Service) hospital search + detail lookup.

Overview

Service	ID	Endpoint	Purpose
Hospital Info	15001698	`hospInfoServicev2`	Hospital list search
Detail Info	15001699	`MadmDtlInfoService2.7`	Departments, hours, transport

Key	Value
Auth	`~/.config/data-go-kr/api_key`
Base URL	`https://apis.data.go.kr/B551182/`
Legal basis	National Health Insurance Act §43

Scripts

scripts/
├── hospital_search.sh  → Search hospitals (name/region/type/dept)
└── hospital_detail.sh  → Hospital detail (parallel API calls)

Workflow

Step 1: Parse search criteria

"근처 이비인후과" → region + department search
"서울대병원 진료시간" → specific hospital detail
~~search to supplement hospital name/location

Step 2: Search hospitals

hospital_search.sh [criteria]

Step 3: Detail lookup (if needed)

hospital_detail.sh [institution_code]

Step 4: Structured response

Output Template

## 🏥 [Query] Hospital Results

| Hospital | Type | Address | Phone | Departments |
|----------|------|---------|-------|-------------|

### [Hospital Name] Detail (on request)
- 📍 Address: ...
- ☎️ Phone: ...
- 🕐 Hours: ...
- 🚗 Transport: ...

Connectors

Placeholder	Purpose	Current Tool
`~~hospital`	Hospital API	HIRA data.go.kr
`~~search`	Name/location supplement	Brave Search
`~~notify`	Alerts	Telegram

Intent Router

Intent	Trigger Examples	Strategy
Quick Search	"근처 이비인후과", "강남 피부과", "소아과 찾아줘"	`hospital_search.sh` → 지역+진료과목 검색 → 목록
Detail Lookup	"이 병원 정보 자세히", "진료시간 알려줘", "주차 되나?"	`hospital_detail.sh` → 진료시간, 교통, 진료과목 상세

Routing logic: 검색/찾기/추천 → Quick Search, 특정 병원 + 상세/시간/교통 → Detail Lookup

Cross-Skill Integration

Trigger	Target Skill	Integration
병원 검색 결과 보충	`web_search` (Brave)	병원 리뷰·평판·홈페이지 보충 검색
외출 시 참고	`kma-weather`	비/추위 예보 시 "따뜻하게 입고 가세요" 팁

Cowork architecture v3.2 — 🦞 chumjibot (2026-02-19)

🔧 Setup (공공데이터 포털 API)

data.go.kr 회원가입
로그인 → 마이페이지 → 일반 인증키(Decoding) 복사

API 키 저장:

mkdir -p ~/.config/data-go-kr
echo "YOUR_API_KEY" > ~/.config/data-go-kr/api_key

아래 서비스 활용신청 후 사용 (자동승인)
- 심평원 병원 정보 (15001698)

安全使用建议

This skill appears to do what it says: call the public HIRA/data.go.kr hospital APIs using a user-provided API key file. Before installing or running it: 1) Ensure you are comfortable storing your data.go.kr API key at ~/.config/data-go-kr/api_key and set tight file permissions (chmod 600). 2) Verify you have curl and python3 available — the registry metadata omitted those requirements. 3) Review the scripts locally (they're simple) and be aware of a minor bug in scripts/hospital.sh where a shell variable is used incorrectly in the embedded Python filter (it may not filter by hospital type as intended). 4) Run in a sandbox or test account if you want to avoid exposing your real API key while testing. 5) If you need connectors (Brave/Telegram) note that SKILL.md only lists them as placeholders—no code in the bundle sends data to those services.

功能分析

Type: OpenClaw Skill Name: hira-hospital Version: 3.2.0 The skill bundle is classified as suspicious due to a critical shell injection vulnerability found in `scripts/hospital_search.sh`. The `HOSP_NAME` parameter is directly interpolated into a single-quoted Python string within a `python3 -c` command without proper escaping, allowing an attacker to inject arbitrary shell commands by crafting a malicious `HOSP_NAME` value. This constitutes a Remote Code Execution (RCE) vulnerability. Other files are largely benign, though `scripts/hospital.sh` contains a functional bug where a shell variable is not expanded within an embedded Python script.

能力评估

ℹ Purpose & Capability

The name/description (HIRA hospital search) align with the included scripts which call apis.data.go.kr endpoints. Minor inconsistency: the registry metadata declares no required binaries or env vars, but the scripts require a local API key file (~/.config/data-go-kr/api_key) and expect tools like curl and python3 to be available.

✓ Instruction Scope

Runtime instructions and scripts only read the API key file in the user's home config, call HIRA/data.go.kr endpoints, and parse responses locally. They do not reference unrelated system files, other credentials, or external endpoints beyond the public data.go.kr API. SKILL.md mentions optional connectors (Brave/Telegram) as placeholders but the scripts do not call those services.

✓ Install Mechanism

No install/spec download is provided (instruction-only with bundled scripts). Nothing in the install surface pulls remote code or writes files to unexpected locations.

ℹ Credentials

The skill requires a HIRA/data.go.kr API key stored at ~/.config/data-go-kr/api_key (documented in SKILL.md and used by scripts). Registry fields list no required env vars — this omission is a bookkeeping mismatch but not a functional surprise. The requested credential is narrowly scoped to the public API and is proportionate to the purpose.

✓ Persistence & Privilege

always:false and the skill does not attempt to modify other skills or system-wide agent settings. It runs on-demand and does not request persistent elevated privileges.

如何使用

确保已安装 OpenClaw（本地或 Docker 部署）
在对话框中输入安装命令：/install hira-hospital
安装完成后，直接呼叫该 Skill 的名称或使用 /hira-hospital 触发
根据 Skill 的参数说明提供必要输入，即可获得结构化输出

版本历史

v3.2.0

HIRA API 기반 전국 병원·의원·약국 검색

元数据

Slug hira-hospital

版本 3.2.0

许可证 —

累计安装 0

当前安装数 0

历史版本数 1

常见问题