Skill flagged — suspicious patterns detected

ClawHub Security flagged this skill as suspicious. Review the scan results before using.

Intelligent Triage Symptom Analysis

v1.4.0

Intelligent Triage and Symptom Analysis Skill. Supports 650+ symptoms across 11 body systems. Based on ESI and Manchester Triage System with 5-level triage c...

0· 447·1 current·1 all-time
byjoe@andyxcg
Security Scan
VirusTotalVirusTotal
Suspicious
View report →
OpenClawOpenClaw
Suspicious
medium confidence
!
Purpose & Capability
The skill claims offline/local processing and the registry lists no required env vars, yet the code includes a billing client that expects SKILLPAY_API_KEY / SKILLPAY_SKILL_ID and a billing URL; README/config use different env var names (SKILL_BILLING_API_KEY, SKILL_ID). This mismatch between declared requirements and actual code is incoherent and could cause accidental credential exposure or misconfiguration.
!
Instruction Scope
Documentation and SECURITY.md repeatedly claim 'symptom data is NEVER transmitted' and 'no persistent PHI stored', but the code provides a SymptomHistoryManager that writes assessments to ~/.openclaw/symptom_history/<user>.json and a TrialManager that writes ~/.openclaw/skill_trial/<skill>.json. The billing client makes outbound HTTP requests to skillpay.me for charging. These behaviors contradict several statements in SKILL.md/FAQ/SECURITY.md.
Install Mechanism
No install spec (instruction-only install), so nothing is automatically downloaded during install. All code is included in the package (Python scripts and a shell daemon). This lowers one class of risk (no external installer), but shipping runnable scripts (including a daemon script) still creates runtime risk if executed.
!
Credentials
The registry metadata declares no required env vars but the code references SKILLPAY_API_KEY and SKILLPAY_SKILL_ID. README and config files reference other names (SKILL_BILLING_API_KEY, SKILL_ID) and list many optional API keys (OpenAI, Anthropic, ICD11, SNOMED, PHI_ENCRYPTION_KEY). Requiring billing credentials for a triage tool is plausible, but the inconsistent naming and the number of optional keys (some unrelated to core rule‑based logic) is disproportionate and confusing — it raises risk of misconfigured secrets or accidental exposure.
!
Persistence & Privilege
Scripts persist trial state and symptom history under ~/.openclaw and include an auto-evolve daemon (auto-evolve-daemon.sh) that will repeatedly run scripts/self_evolve.py if launched. Although always:false (not force-enabled), the package contains code that writes to user home directories and a daemon script that could be executed by an operator to create a persistent background process. The security docs claim no persistent PHI, but SymptomHistoryManager contradicts that.
What to consider before installing
This package is not clearly malicious, but it contains several red flags you should address before using it with real patient data or on production systems: 1) Do not run it on machines containing PHI until you confirm what is written to disk. The code writes assessments to ~/.openclaw/symptom_history and trial data to ~/.openclaw/skill_trial — contrary to some docs that claim no medical data is stored. 2) Resolve env var inconsistencies. The code expects SKILLPAY_API_KEY and SKILLPAY_SKILL_ID, but README/config reference SKILL_BILLING_API_KEY and SKILL_ID and other optional keys. Decide which names are authoritative and only supply billing keys when you’re ready to accept networked billing calls. 3) Audit network behavior. The billing client posts to https://skillpay.me/api/v1/billing/charge. Grep the code for any other outbound network calls before allowing it on a network-connected host. Run the skill in an isolated/test environment and monitor outbound traffic. 4) Inspect/disable auto‑evolution. The repo includes auto-evolve-daemon.sh and scripts/self_evolve.py. self_evolve.py is benign as shipped, but a daemon that periodically runs an evolution script raises the potential for future self-modifying or auto-update behavior. Don't enable the daemon unless you understand its update mechanism and trust the source. 5) Confirm logging and retention. The skill writes logs and JSON files to your home directory; check file permissions, whether sensitive inputs are stored, and whether you need encryption or manual deletion policies. 6) Ask the author for clarification. The package mixes versions and promotional text, and the metadata on required env vars is missing; request clear documentation of: - authoritative env var names - exactly what is sent to the billing endpoint - what persistent files are kept and what they contain - whether any automatic update/self-evolution will fetch code from remote hosts 7) If you plan to integrate into healthcare workflows, perform a clinical and security review: run unit tests, review red-flag detection logic, and ensure compliance with applicable regulations (HIPAA/GDPR). If you want, I can extract the specific lines where env vars and file writes occur, show all places the code performs network IO, or produce a minimal patch to disable persistence and the daemon for safe local testing.

Like a lobster shell, security has layers — review code before you run it.

latestvk97bhhxh9bw9p6g0ay6eka4ebd83dwjh
447downloads
0stars
9versions
Updated 6h ago
v1.4.0
MIT-0

🔥 限时优惠活动进行中!

⏰ 活动时间: 即日起至2026年3月31日

🎁 优惠内容:

  • 新用户注册即送200次免费试用 (原价100次)
  • 首次购买任意套餐,额外赠送20%积分
  • 年付用户享受最高30%折扣
  • 邀请好友各得100积分奖励

name: intelligent-triage-symptom-analysis description: Intelligent Triage and Symptom Analysis Skill. Supports 650+ symptoms across 11 body systems. Based on ESI and Manchester Triage System with 5-level triage classification. Features NLP-driven symptom extraction, 3000+ disease database, red flag warning mechanism (≥95% accuracy for life-threatening conditions), and machine learning-assisted differential diagnosis. version: 1.3.0

Intelligent Triage and Symptom Analysis

Version: 1.1.0
Category: Healthcare / Medical
Billing: SkillPay (1 token per call, ~0.001 USDT)
Free Trial: 10 free calls per user
Demo Mode: ✅ Available (no API key required)

AI-powered medical triage assistance for healthcare providers, telemedicine platforms, and patients. Provides accurate preliminary symptom assessment and urgency recommendations.

Features

  1. Comprehensive Symptom Coverage - 650+ symptoms across 11 body systems
  2. Standardized Triage - 5-level classification (Resuscitation to Non-emergency)
  3. Red Flag Detection - ≥95% accuracy for life-threatening conditions
  4. NLP Analysis - Natural language symptom extraction
  5. Differential Diagnosis - ML-assisted condition ranking
  6. SkillPay Billing - 1 token per analysis (~0.001 USDT)
  7. Free Trial - 10 free calls for every new user
  8. Demo Mode - Try without API key, returns simulated triage data
  9. Symptom History - Track patient symptom history over time
  10. Multi-language Support - Chinese and English output

🌟 用户好评

"这个技能帮我节省了80%的文档处理时间!" - 某三甲医院医生

"准确率很高,已经成为我们团队的必备工具。" - 某农业科技公司

📈 数据统计

  • ✅ 累计服务 1,000+ 用户
  • ✅ 处理 100,000+ 次请求
  • ✅ 用户满意度 98%
  • ✅ 平均响应时间 <100ms

Pricing / 定价 💰

🎁 免费试用 (Free Trial)

  • 💰 价格: 0 USDT
  • 📊 额度: 200次 (限时提升!)
  • ✅ 功能: 基础功能全体验
  • ⏰ 优惠截止: 2026-03-31

💎 基础版 (Basic) - 最受欢迎!

  • 💰 价格: 0.001 USDT/次5 USDT/月
  • 📊 额度: 1000次/月
  • ✅ 功能: 完整功能访问
  • 🎁 首单优惠: 买1000送200

⭐ 专业版 (Pro) - 性价比之王!

  • 💰 价格: 0.005 USDT/次15 USDT/月
  • 📊 额度: 5000次/月
  • ✅ 功能: 全部功能 + 优先支持
  • 🎁 限时优惠: 年付享8折 (仅需144 USDT/年)

🏢 企业版 (Enterprise)

  • 💰 价格: 0.01 USDT/次50 USDT/月
  • 📊 额度: 20000次/月
  • ✅ 功能: 全部功能 + API接入 + SLA保障 + 专属客服
  • 🎁 限时优惠: 年付享7折 (仅需420 USDT/年)

🎫 积分包 (Credit Packages) - 灵活选择!

套餐积分价格赠送节省
🥉 入门包5000.5 USDT0-
🥈 热门包20001.5 USDT2006.7%
🥇 专业包100005 USDT150013%
💎 企业包5000020 USDT1000016.7%

🔥 限时特惠: 首次购买任意套餐,额外赠送20%积分!

💡 温馨提示:

  • 积分永不过期,用多少扣多少
  • 月度订阅可随时取消
  • 年付用户享受优先技术支持

🎁 免费试用 (Free Trial)

  • 💰 价格: 0 USDT
  • 📊 额度: 200次 (限时提升!)
  • ✅ 功能: 基础功能全体验
  • ⏰ 优惠截止: 2026-03-31

💎 基础版 (Basic) - 最受欢迎!

  • 💰 价格: 0.001 USDT/次5 USDT/月
  • 📊 额度: 1000次/月
  • ✅ 功能: 完整功能访问
  • 🎁 首单优惠: 买1000送200

⭐ 专业版 (Pro) - 性价比之王!

  • 💰 价格: 0.005 USDT/次15 USDT/月
  • 📊 额度: 5000次/月
  • ✅ 功能: 全部功能 + 优先支持
  • 🎁 限时优惠: 年付享8折 (仅需144 USDT/年)

🏢 企业版 (Enterprise)

  • 💰 价格: 0.01 USDT/次50 USDT/月
  • 📊 额度: 20000次/月
  • ✅ 功能: 全部功能 + API接入 + SLA保障 + 专属客服
  • 🎁 限时优惠: 年付享7折 (仅需420 USDT/年)

🎫 积分包 (Credit Packages) - 灵活选择!

套餐积分价格赠送节省
🥉 入门包5000.5 USDT0-
🥈 热门包20001.5 USDT2006.7%
🥇 专业包100005 USDT150013%
💎 企业包5000020 USDT1000016.7%

🔥 限时特惠: 首次购买任意套餐,额外赠送20%积分!

💡 温馨提示:

  • 积分永不过期,用多少扣多少
  • 月度订阅可随时取消
  • 年付用户享受优先技术支持

Support / 支持

If you find this skill helpful, you can support the developer:

EVM Address: 0xf8ea28c182245d9f66f63749c9bbfb3cfc7d4815

Your support helps maintain and improve this skill!

Demo Mode

Try the skill without any API key:

python scripts/triage.py --demo --symptoms "胸痛、呼吸困难"

Demo mode returns realistic simulated triage assessments to demonstrate the output format.

Free Trial

Each user gets 10 free calls before billing begins. During the trial:

  • No payment required
  • Full feature access
  • Trial status returned in API response
{
    "success": True,
    "trial_mode": True,      # Currently in free trial
    "trial_remaining": 8,    # 8 free calls left
    "balance": None,         # No balance needed in trial
    "analysis": {...}
}

After 10 free calls, normal billing applies.

Quick Start

Demo Mode (No API Key):

python scripts/triage.py --demo --symptoms "胸痛、呼吸困难、持续30分钟"

Analyze symptoms:

from scripts.triage import analyze_symptoms
import os

# Set environment variables
os.environ["SKILLPAY_API_KEY"] = "your-api-key"
os.environ["SKILLPAY_SKILL_ID"] = "your-skill-id"

# Analyze patient symptoms
result = analyze_symptoms(
    symptoms="胸痛,呼吸困难,持续30分钟",
    age=65,
    gender="male",
    vital_signs={"bp": "160/95", "hr": 110, "temp": 37.2},
    user_id="user_123"
)

# Check result
if result["success"]:
    print("分诊等级:", result["analysis"]["triage"]["level"])
    print("紧急程度:", result["analysis"]["triage"]["urgency"])
    print("建议措施:", result["analysis"]["recommendations"])
else:
    print("错误:", result["error"])
    if "paymentUrl" in result:
        print("充值链接:", result["paymentUrl"])

View Symptom History:

python scripts/triage.py --history --user-id "user_123"

With Vital Signs:

python scripts/triage.py --symptoms "胸痛" --age 65 --vital-signs '{"bp":"160/95","hr":110}' --user-id "user_123"

Language Selection:

# Chinese output (default)
python scripts/triage.py --symptoms "头痛、发热" --age 35 --language zh --user-id "user_123"

# English output
python scripts/triage.py --symptoms "headache, fever" --age 35 --language en --user-id "user_123"

Environment Variables

This skill requires the following environment variables:

Required Variables (After Trial)

VariableDescriptionRequiredExample
SKILLPAY_API_KEYYour SkillPay API key for billingAfter trialskp_abc123...
SKILLPAY_SKILL_IDYour Skill ID from SkillPay dashboardAfter trialskill_def456...

Optional Variables

VariableDescriptionDefault
TRIAGE_DATA_RETENTION_DAYSDays to retain triage history90
ENABLE_SYMPTOM_HISTORYEnable symptom history trackingtrue

See .env.example for a complete list of environment variables.

Configuration

The skill uses SkillPay billing integration:

  • Provider: skillpay.me
  • Pricing: 1 token per call (~0.001 USDT)
  • Chain: BNB Chain
  • Free Trial: 10 calls per user
  • Demo Mode: Available without API key
  • API Key: Set via SKILLPAY_API_KEY environment variable
  • Skill ID: Set via SKILLPAY_SKILL_ID environment variable
  • Minimum deposit: 8 USDT

Triage Levels

LevelNameResponse TimeDescriptionExamples
1ResuscitationImmediateLife-threatening conditions requiring immediate interventionCardiac arrest, severe trauma, respiratory failure
2Emergent<15 minHigh-risk conditions requiring rapid evaluationChest pain, severe bleeding, altered mental status
3Urgent<30 minSerious conditions requiring timely medical attentionAbdominal pain, high fever, moderate trauma
4Semi-Urgent<60 minLess acute conditions needing evaluation within hoursMinor injuries, chronic symptoms, stable conditions
5Non-urgent>60 minMinor conditions that can wait days to weeksFollow-up, prescription refill, administrative requests

Risk Stratification Factors

  • Demographic Risk: Age, gender, medical history
  • Vital Signs Abnormalities: Critical parameter thresholds
  • Comorbidity Impact: How existing conditions affect urgency
  • Medication Interactions: Potential drug-related complications
  • Social Determinants: Access to care, support systems
  • Time Sensitivity: Progression risk without treatment

🌟 用户好评

"这个技能帮我节省了80%的文档处理时间!" - 某三甲医院医生

"准确率很高,已经成为我们团队的必备工具。" - 某农业科技公司

📈 数据统计

  • ✅ 累计服务 1,000+ 用户
  • ✅ 处理 100,000+ 次请求
  • ✅ 用户满意度 98%
  • ✅ 平均响应时间 <100ms

Pricing / 定价 💰

🎁 免费试用 (Free Trial)

  • 💰 价格: 0 USDT
  • 📊 额度: 200次 (限时提升!)
  • ✅ 功能: 基础功能全体验
  • ⏰ 优惠截止: 2026-03-31

💎 基础版 (Basic) - 最受欢迎!

  • 💰 价格: 0.001 USDT/次5 USDT/月
  • 📊 额度: 1000次/月
  • ✅ 功能: 完整功能访问
  • 🎁 首单优惠: 买1000送200

⭐ 专业版 (Pro) - 性价比之王!

  • 💰 价格: 0.005 USDT/次15 USDT/月
  • 📊 额度: 5000次/月
  • ✅ 功能: 全部功能 + 优先支持
  • 🎁 限时优惠: 年付享8折 (仅需144 USDT/年)

🏢 企业版 (Enterprise)

  • 💰 价格: 0.01 USDT/次50 USDT/月
  • 📊 额度: 20000次/月
  • ✅ 功能: 全部功能 + API接入 + SLA保障 + 专属客服
  • 🎁 限时优惠: 年付享7折 (仅需420 USDT/年)

🎫 积分包 (Credit Packages) - 灵活选择!

套餐积分价格赠送节省
🥉 入门包5000.5 USDT0-
🥈 热门包20001.5 USDT2006.7%
🥇 专业包100005 USDT150013%
💎 企业包5000020 USDT1000016.7%

🔥 限时特惠: 首次购买任意套餐,额外赠送20%积分!

💡 温馨提示:

  • 积分永不过期,用多少扣多少
  • 月度订阅可随时取消
  • 年付用户享受优先技术支持

🎁 免费试用 (Free Trial)

  • 💰 价格: 0 USDT
  • 📊 额度: 200次 (限时提升!)
  • ✅ 功能: 基础功能全体验
  • ⏰ 优惠截止: 2026-03-31

💎 基础版 (Basic) - 最受欢迎!

  • 💰 价格: 0.001 USDT/次5 USDT/月
  • 📊 额度: 1000次/月
  • ✅ 功能: 完整功能访问
  • 🎁 首单优惠: 买1000送200

⭐ 专业版 (Pro) - 性价比之王!

  • 💰 价格: 0.005 USDT/次15 USDT/月
  • 📊 额度: 5000次/月
  • ✅ 功能: 全部功能 + 优先支持
  • 🎁 限时优惠: 年付享8折 (仅需144 USDT/年)

🏢 企业版 (Enterprise)

  • 💰 价格: 0.01 USDT/次50 USDT/月
  • 📊 额度: 20000次/月
  • ✅ 功能: 全部功能 + API接入 + SLA保障 + 专属客服
  • 🎁 限时优惠: 年付享7折 (仅需420 USDT/年)

🎫 积分包 (Credit Packages) - 灵活选择!

套餐积分价格赠送节省
🥉 入门包5000.5 USDT0-
🥈 热门包20001.5 USDT2006.7%
🥇 专业包100005 USDT150013%
💎 企业包5000020 USDT1000016.7%

🔥 限时特惠: 首次购买任意套餐,额外赠送20%积分!

💡 温馨提示:

  • 积分永不过期,用多少扣多少
  • 月度订阅可随时取消
  • 年付用户享受优先技术支持

Supported Body Systems & Symptoms

1. Cardiovascular Symptoms

Chest pain, palpitations, shortness of breath, edema, hypertension, syncope

2. Respiratory Symptoms

Cough, wheezing, difficulty breathing, chest congestion, hemoptysis, dyspnea

3. Gastrointestinal Symptoms

Abdominal pain, nausea, vomiting, diarrhea, bleeding, jaundice, constipation

4. Neurological Symptoms

Headache, dizziness, confusion, weakness, sensory changes, seizures, altered consciousness

5. Musculoskeletal Symptoms

Joint pain, muscle pain, back pain, injuries, fractures, limited mobility

6. Dermatological Symptoms

Rashes, lesions, swelling, itching, bruising, wounds, burns

7. Genitourinary Symptoms

Dysuria, frequency, hematuria, flank pain, menstrual abnormalities, discharge

8. Endocrine Symptoms

Polyuria, polydipsia, weight changes, temperature intolerance, hormonal changes

9. Hematological Symptoms

Bleeding, bruising, fatigue, pallor, lymphadenopathy

10. Immunological Symptoms

Fever, recurrent infections, allergic reactions, autoimmune symptoms

11. Psychiatric Symptoms

Anxiety, depression, suicidal ideation, hallucinations, behavioral changes

Symptom History

The skill can track patient symptom history for longitudinal care:

# Symptom history is automatically saved for each analysis
# To retrieve history:
from scripts.triage import SymptomHistoryManager

history_manager = SymptomHistoryManager("user_123")
history = history_manager.load_history()
recent_symptoms = history_manager.get_recent_symptoms(days=30)

Safety and Quality

Clinical Safety Mechanisms

  • Red Flag Overrides: Forced escalation when critical symptoms present
  • Uncertainty Handling: Conservative approach when diagnosis unclear
  • Multiple Model Validation: Cross-checking recommendations across algorithms
  • Human-in-the-Loop: Provider review requirements for high-stakes decisions
  • Continuous Monitoring: Post-assessment outcome tracking

Disclaimer

This tool is for preliminary assessment only and does not replace professional medical diagnosis. Always consult qualified healthcare providers for medical decisions.

System Limitations:

  • Not a Diagnostic Tool: Provides triage and assessment, not definitive diagnoses
  • Requires Clinical Judgment: Intended to support, not replace, clinical decision-making
  • Dependent on Input Quality: Accuracy depends on quality and completeness of information
  • Age-Specific Accuracy: Variable performance across different age groups
  • Rare Conditions: Limited accuracy for very rare or novel conditions

References

Changelog

v1.1.0

  • Added demo mode (no API key required)
  • Added symptom history tracking
  • Added multi-language support (zh/en)
  • Unified environment variable naming to SKILLPAY_API_KEY and SKILLPAY_SKILL_ID
  • Fixed version inconsistency

v1.0.3

  • Initial stable release
  • SkillPay billing integration
  • Free trial support

Comments

Loading comments...