Healthie

Healthie — manage patients, appointments, goals, and documents via GraphQL API

Security Scan

The skill's code and requirements are consistent with a Healthie API client; nothing indicates intentional misdirection or excess privileges, though there are a few small implementation notes to be aware of.

Purpose & Capability

The skill claims to manage patients/appointments via a Healthie API and requires HEALTHIE_API_KEY — which matches the included CLI implementation that talks to https://api.gethealthie.com. Minor mismatch: SKILL.md and metadata mention a GraphQL API, but the script uses REST-style endpoints (e.g., /users, /appointments) rather than sending GraphQL queries to /graphql. This is likely an implementation description mismatch, not a security issue.

Instruction Scope

SKILL.md simply instructs running the provided Python script. The script makes outbound HTTPS requests to api.gethealthie.com (expected). It also attempts to read a .env file from WORKSPACE or ~/.openclaw/workspace/.env to obtain the HEALTHIE_API_KEY if the env var is not set. The README does not document this .env fallback or the WORKSPACE env var; reading that file is limited to extracting the requested key, but it does mean the script can read a file in the user's home directory.

Install Mechanism

No install spec; this is an instruction-only skill with a bundled Python script. No additional packages or downloads are performed.

Credentials

Only HEALTHIE_API_KEY is declared/required, which is proportionate for an API client. However, the script also reads the WORKSPACE env var (if present) and a .env file path as a fallback; WORKSPACE is not declared in requires.env. The script does not request any other unrelated credentials.

Persistence & Privilege

The skill does not request always: true and does not modify other skills or system-wide settings. It runs as a normal, user-invoked CLI.

Assessment

This skill appears to be a straightforward Healthie API client and only needs your HEALTHIE_API_KEY. Before installing: (1) Confirm you trust the owner/homepage (agxntsix.ai) and that this is the intended Healthie integration. (2) Prefer setting HEALTHIE_API_KEY in the environment rather than relying on a ~/.openclaw/workspace/.env file (the script will read that file as a fallback). (3) Limit the API key's permissions to the minimum required and avoid using a highly privileged key that could expose PHI. (4) Note the SKILL.md claims GraphQL but the script uses REST endpoints—verify this matches the Healthie API you expect. (5) If handling real patient data, run the tool in a controlled environment and review network activity to ensure requests go only to the expected api.gethealthie.com host.

Healthie — manage patients, appointments, goals, and documents via GraphQL API

Requirements

Variable	Required	Description
HEALTHIE_API_KEY	✅	API key from Healthie developer settings

Quick Start

# List patients
python3 {{baseDir}}/scripts/healthie.py patients --offset <value> --keywords <value>

# Get patient
python3 {{baseDir}}/scripts/healthie.py patient-get id <value>

# Create patient
python3 {{baseDir}}/scripts/healthie.py patient-create --first_name <value> --last_name <value> --email <value>

# List appointments
python3 {{baseDir}}/scripts/healthie.py appointments --provider_id <value>

# Get appointment
python3 {{baseDir}}/scripts/healthie.py appointment-get id <value>

# Create appointment
python3 {{baseDir}}/scripts/healthie.py appointment-create --patient_id <value> --provider_id <value> --datetime <value>

# Delete appointment
python3 {{baseDir}}/scripts/healthie.py appointment-delete id <value>

# List appointment types
python3 {{baseDir}}/scripts/healthie.py appointment-types

All Commands

Command	Description
patients	List patients
patient-get	Get patient
patient-create	Create patient
appointments	List appointments
appointment-get	Get appointment
appointment-create	Create appointment
appointment-delete	Delete appointment
appointment-types	List appointment types
providers	List providers
goals	List goals
goal-create	Create goal
documents	List documents
forms	List forms
tags	List tags

Output Format

All commands output JSON by default. Add --human for readable formatted output.

python3 {{baseDir}}/scripts/healthie.py <command> --human

Script Reference

Script	Description
{{baseDir}}/scripts/healthie.py	Main CLI — all commands in one tool

Credits

Built by M. Abidi | agxntsix.ai YouTube | GitHub Part of the AgxntSix Skill Suite for OpenClaw agents.

📅 Need help setting up OpenClaw for your business? Book a free consultation