TCM Prescription API

中医药方剂API查询技能。通过HTTP API查询中医药方剂数据库中的方剂资料。支持方剂搜索、方剂详情查看、分类浏览、症状推荐等功能。This skill should be used when the user mentions: 查方剂、搜索方剂、方剂详情、中药方、方剂分类、症状推荐方剂、中医药方查询、方剂数...

This skill appears to do what it says (query a prescriptions API) but take these precautions before installing or using it: 1) Verify the API endpoint and publisher: the service is addressed by a raw IP (https://119.91.226.122) rather than a domain — confirm you trust that host and the developer (email listed is [email protected]). 2) Be aware of the declared mismatch: SKILL.md and the script expect TCM_API_KEY, but the registry metadata did not list required env vars; treat the API key as a secret and only set it in a safe environment variable for testing. 3) Consider privacy: queries may include sensitive health information that will be sent to the remote host. 4) Test with no API key first (search/detail endpoints are documented as public) and monitor network requests (or use a dedicated sandbox) to confirm expected behavior. 5) If you need higher assurance, ask the publisher for a canonical domain, HTTPS certificate info, and proof of reputation, or avoid installing the skill until its origin and host are validated.

Type: OpenClaw Skill Name: tcm-prescription-api Version: 1.0.5 The skill provides a legitimate interface for querying a Traditional Chinese Medicine (TCM) prescription database via a REST API (hosted at 119.91.226.122). The implementation in `scripts/query_prescriptions.sh` follows security best practices by using environment variables for API keys and employing Python-based URL encoding and JSON construction to safely handle user inputs, mitigating shell injection risks. The instructions in `SKILL.md` are well-aligned with the stated purpose and do not contain any prompt-injection or exfiltration attempts.