ClawHub

MedRates.fyi

v1.0.1

Query US hospital price transparency data via the MedRates REST API. Search medical procedure prices, compare hospitals, filter by insurance plan and locatio...

⭐ 0· 118·0 current·0 all-time
by@dimaosipa
MIT-0
Download zip
LicenseMIT-0 · Free to use, modify, and redistribute. No attribution required.
Security Scan
VirusTotalVirusTotal
Benign
View report →
OpenClawOpenClaw
Benign
high confidence
✓
Purpose & Capability
Name/description match the SKILL.md: it documents HTTP endpoints on https://data.medrates.fyi, provides curl examples for searching prices and price-quote queries, and claims no required credentials for basic use. There are no unrelated binaries, extra cloud credentials, or surprising system-level demands.
ℹ
Instruction Scope
Instructions are limited to querying the MedRates API (NLP search, price-quote, text search). They do not instruct reading local files or other system state. Note: the skill asks for user-supplied data such as latitude/longitude and payer/plan information—these can be sensitive (medical/PHI) and will be sent to the remote API; the SKILL.md references an 'Authentication' section for higher rate limits (not included in the excerpt) which could introduce optional token usage.
✓
Install Mechanism
No install spec and no code files — instruction-only. This is low-risk from a code-installation perspective because nothing will be written to disk or fetched by the installer.
ℹ
Credentials
The skill declares no required environment variables or credentials, which is consistent with the statement that no API key is required for basic use. However, the SKILL.md mentions an 'Authentication' section for higher rate limits; if that requires an API key/token it is not declared in the skill metadata. Optional auth would be reasonable, but the absence of declared optional env vars is a mild documentation inconsistency to be aware of.
✓
Persistence & Privilege
always is false, no install writes, and the skill is user-invocable/default-invocation allowed. It does not request persistent privileges or modify other skill/system configs.
Assessment
This skill is an instruction-only client for data.medrates.fyi and appears coherent for price-lookup tasks. Before installing: verify you trust the domain (https://data.medrates.fyi), because queries will send any supplied location and payer details (potentially sensitive medical information) to that external API; check the SKILL.md's full 'Authentication' section or the service website for optional API key usage and whether you need to supply a token (the skill metadata does not declare any env vars). If you plan to look up real patient data, avoid sending identifying fields (name, SSN) and consider anonymizing locations (use zip codes rather than full addresses) or obtain patient consent. Finally, because this skill has no code files, static scanners had nothing to analyze — the runtime privacy risk is the network calls the SKILL.md instructs the agent to make.

Like a lobster shell, security has layers — review code before you run it.

latestvk972rha7rbretnj3cbpwq1szvs834607

License

MIT-0
Free to use, modify, and redistribute. No attribution required.
Termshttps://spdx.org/licenses/MIT-0.html

Comments