← 返回 Skills 市场
gljirain

Mental Health Booking

作者 gljirain · GitHub ↗ · v1.0.0 · MIT-0
cross-platform ⚠ suspicious
267
总下载
0
收藏
0
当前安装
1
版本数
在 OpenClaw 中安装
/install mental-health-booking
功能描述
Book same-day psychiatric and mental health telehealth appointments through conversation — no forms, no portals. Covers ADHD, anxiety, depression, insomnia,...
安全使用建议
This skill appears to implement booking by calling https://rx.helloklarity.com and will ask users for sensitive personal and health information (name, DOB, email, phone, insurance IDs) and then POST that data to an external API. Before installing, consider: (1) Do you trust the external domain (rx.helloklarity.com)? Verify vendor identity and privacy/HIPAA handling. (2) The script accepts an undocumented BOOKING_API_URL environment override — ensure runtime environments cannot set this to a malicious endpoint (lock/whitelist or remove override). (3) The SKILL.md claims multiple partner platforms but only Klarity is implemented — ask the author to clarify. (4) Ensure your agent/runtime will not log or persist PHI in telemetry or debug logs and that you have user consent to transmit sensitive data. (5) Prefer testing in 'dry-run' mode (book-dry) and review network traffic from a safe test account before using with real patient data. If you need help vetting the remote service or restricting BOOKING_API_URL, get a security/IT review first.
功能分析
Type: OpenClaw Skill Name: mental-health-booking Version: 1.0.0 The skill facilitates mental health appointment bookings by collecting sensitive PII (Name, DOB, Email, and Insurance IDs) and transmitting it to a third-party API (rx.helloklarity.com). While the behavior is aligned with the stated purpose and includes safety features like a crisis check in SKILL.md, the script 'scripts/booking-api.sh' contains a potential command injection vulnerability where the 'carrier' argument is unsafely passed into a python3 execution string. This flaw could allow a malicious user to execute arbitrary code on the agent's host system via the insurance carrier input field.
能力评估
Purpose & Capability
The skill's name/description align with the provided code and API reference: the script and docs call Klarity's booking endpoints to list services, search availability, and create bookings. No unrelated cloud credentials or unrelated binaries are requested.
Instruction Scope
The runtime instructions collect sensitive personal and health information (name, DOB, email, phone, insurance IDs) and instruct the agent to POST that data to an external service (rx.helloklarity.com). That is expected for booking but is high-sensitivity (PHI). The SKILL.md also references multiple 'curated platforms' (Klarity, One Behavior, ABHolistic) but the included implementation and API reference only target Klarity — an inconsistency. The skill relies on a local script (scripts/booking-api.sh) and tells the agent to run it; the script in turn reads an environment variable (BOOKING_API_URL) that is not documented in the skill metadata, which is a scope creep / surprise.
Install Mechanism
No install spec — instruction-only plus a small bash client. No remote downloads or package installs. The script uses standard tools (curl, python3) that are normally present; this is low installation risk.
Credentials
The skill metadata declares no required env vars, but the script honors BOOKING_API_URL to override the base endpoint. That environment variable is not declared in requires.env or explained in the SKILL.md metadata. Allowing an undocumented override of the booking endpoint is a risk (malicious or accidental redirection of PHI). Other than that, no extraneous credentials are requested.
Persistence & Privilege
always is false and the skill has no install-time persistence. It does instruct the agent not to store patient data, which is appropriate, but the platform cannot enforce that — the instruction itself is not a guarantee.
如何使用
  1. 确保已安装 OpenClaw(本地或 Docker 部署)
  2. 在对话框中输入安装命令:/install mental-health-booking
  3. 安装完成后,直接呼叫该 Skill 的名称或使用 /mental-health-booking 触发
  4. 根据 Skill 的参数说明提供必要输入,即可获得结构化输出
版本历史
v1.0.0
Initial release: book psychiatric telehealth appointments via conversation. 7 conditions, 51 states, 50+ insurance carriers.
元数据
Slug mental-health-booking
版本 1.0.0
许可证 MIT-0
累计安装 0
当前安装数 0
历史版本数 1
常见问题

Mental Health Booking 是什么?

Book same-day psychiatric and mental health telehealth appointments through conversation — no forms, no portals. Covers ADHD, anxiety, depression, insomnia,... 它是一个面向 Claude Code / OpenClaw 的 AI Agent Skill 插件,目前累计下载 267 次。

如何安装 Mental Health Booking?

在 OpenClaw 或 Claude Code 对话框中运行命令「/install mental-health-booking」即可一键安装,无需额外配置。

Mental Health Booking 是免费的吗?

是的,Mental Health Booking 完全免费,采用 MIT-0 许可证,可自由下载、安装和使用。

Mental Health Booking 支持哪些平台?

Mental Health Booking 跨平台运行,可在任意部署了 OpenClaw / Claude Code 的环境中使用(cross-platform)。

谁开发了 Mental Health Booking?

由 gljirain(@gljirain)开发并维护,当前版本 v1.0.0。

💬 留言讨论