🏥 ai-medical-care-manager — 门诊就医全流程助手
v1.0.0面向个人用户的门诊就医全流程 AI 助手：先进行症状分流与科室判断，再智能推荐 Top3 医院/医生，并提供挂号引导、就医准备清单、就诊提醒、诊后报告解读，以及基于高德地图的精准到院路线规划，一站式解决看病难题。
0· 140·0 当前·0 累计
by 安全扫描
OpenClaw
安全
high confidenceNULL
评估建议
This skill appears to do what it says: run local Python/Node scripts to triage symptoms, parse appointment text, produce a pre-visit card and reminders, and — if you supply an AMap key — call AMap web services to geocode and plan routes. Before installing, consider: (1) Privacy: any location string or IP you supply will be sent to AMap (restapi.amap.com) and generated map links embed route data in a public AMap demo URL — avoid sending extremely sensitive personal data to external map services. ...详细分析 ▾
✓ 用途与能力
Name/description match what is implemented: Python scripts perform triage, parsing, reminders, and pre-visit card generation; Node scripts handle AMap geocoding, IP locate and route link generation. Required binaries (python3, node) and axios dependency are expected for these tasks. The large CSV asset is appropriate for hospital/doctor matching.
ℹ 指令范围
SKILL.md confines runtime actions to the skill's files (scripts and references) and to calling AMap web services for mapping. It instructs optionally attempting IP-based coarse location if the agent can obtain a user IP — the node ip-locate script requires an explicit --ip argument, so there is no hidden automatic network probing. Be aware that if you provide user location/address or IP, those values are sent to AMap endpoints (external service) for geocoding/route planning.
✓ 安装机制
Install spec only pulls in the npm package 'axios' (declared in package.json) — a minimal and expected runtime HTTP client. There are no downloads from arbitrary URLs or archives; no high-risk install actions detected.
ℹ 凭证需求
The skill does not declare required env vars in registry metadata, but the code and SKILL.md use optional AMAP_WEBSERVICE_KEY / AMAP_KEY for routing. Requesting an AMap Web Service key is proportionate to offering route planning. One thing to note: the vendor code can persist a provided key to a local config file (scripts/vendor/config.json), which stores the key on disk; this is a design choice (convenience) but worth knowing for secret handling.
✓ 持久化与权限
The skill does not request always: true, does not modify other skills, and only persists its own config (vendor/config.json) if the developer helper functions are used. Files written are limited to the skill directory and are within expected scope.
⚠ scripts/amap_geocode.js:19
Environment variable access combined with network send.
⚠ scripts/amap_ip_locate.js:31
Environment variable access combined with network send.
⚠ scripts/vendor/amap_index.js:59
Environment variable access combined with network send.
⚠ scripts/vendor/amap_index.js:14
File read combined with network send (possible exfiltration).
安全有层次，运行前请审查代码。
运行时依赖
无特殊依赖
版本
latestv1.0.02026/3/20
NULL
● 可疑
安装命令
点击复制官方npx clawhub@latest install ai-medical-care-manager
镜像加速npx clawhub@latest install ai-medical-care-manager --registry https://cn.longxiaskill.com