Skill flagged — suspicious patterns detected

ClawHub Security flagged this skill as suspicious. Review the scan results before using.

dialysis-assistant

v1.0.2

自动记录和分析透析上下机体重、血压及脱水量,提供趋势、警告和个性化饮水建议。

0· 87·0 current·0 all-time
by噢福阔斯KANG@jinkang19940922

Install

OpenClaw Prompt Flow

Install with OpenClaw

Best for remote or guided setup. Copy the exact prompt, then paste it into OpenClaw for jinkang19940922/dialysis-assistant.

Previewing Install & Setup.
Prompt PreviewInstall & Setup
Install the skill "dialysis-assistant" (jinkang19940922/dialysis-assistant) from ClawHub.
Skill page: https://clawhub.ai/jinkang19940922/dialysis-assistant
Keep the work scoped to this skill only.
After install, inspect the skill metadata and help me finish setup.
Use only the metadata you can verify from ClawHub; do not invent missing requirements.
Ask before making any broader environment changes.

Command Line

CLI Commands

Use the direct CLI path if you want to install manually and keep every step visible.

OpenClaw CLI

Bare skill slug

openclaw skills install dialysis-assistant

ClawHub CLI

Package manager switcher

npx clawhub@latest install dialysis-assistant
Security Scan
VirusTotalVirusTotal
Benign
View report →
OpenClawOpenClaw
Suspicious
medium confidence
Purpose & Capability
Name/description, SKILL.md, and dialysis.py are consistent: parsing user messages, storing dialysis records, computing removals/ufr, and presenting history. No unrelated cloud or admin credentials are requested.
!
Instruction Scope
SKILL.md and the included Python implementors instruct the agent to save all personal health data to /other/透析数据(勿删)/dialysis-data.json (explicitly labelled '公共空间'). That exposes protected health information (weights, blood pressure, notes) to any process or user who can read that shared path. The skill also auto-activates on many keywords, which increases the chance of recording data unintentionally.
Install Mechanism
No install spec; skill is delivered as files only. This minimizes supply-chain risk. The code does call a local shell script (sync-backup.sh) via os.system, which is included in the bundle (not downloaded from an external URL).
!
Credentials
The skill requests no credentials or env vars, which is appropriate, but writing sensitive patient data plaintext into a shared filesystem is disproportionate from a privacy perspective. There is no encryption, access control, or opt-in consent indicated for storage/backup.
Persistence & Privilege
Flags are default (always: false); the skill is user-invocable and can be invoked autonomously as platform-default. It does not modify other skills or system-wide settings. It does execute a local backup script on each save via os.system, which writes to the same public area.
What to consider before installing
This skill appears to perform the dialysis recordkeeping it claims, but it stores identifiable health data in a public/shared folder (/other/透析数据(勿删)/dialysis-data.json) and runs a backup script that also writes there. Before installing or using with real patient data: 1) Do not use with real PHI unless you confirm the directory is private and access-restricted; 2) Prefer encryption or a protected storage location and verify file permissions; 3) Review and, if needed, modify sync-backup.sh to avoid exposing backups to other users; 4) Consider disabling automatic activation keywords or testing in an isolated sandbox first; 5) Review the code for correctness (there are minor logic bugs in message handling) and for any additional I/O you don't expect. If you cannot verify the storage privacy and access controls, treat this skill as unsafe for real patient data.

Like a lobster shell, security has layers — review code before you run it.

dialysisvk974bqtdbnxh02cz4h369vy1g184s0smhealthvk974bqtdbnxh02cz4h369vy1g184s0smlatestvk974bqtdbnxh02cz4h369vy1g184s0smtrackingvk974bqtdbnxh02cz4h369vy1g184s0sm
87downloads
0stars
3versions
Updated 2w ago
v1.0.2
MIT-0

透析记录助手 (dialysis)

自动记录透析数据,提供脱水量计算、趋势分析、超重警告、血压记录等完整功能。

激活关键词

用户发送消息包含以下关键词时自动激活:

  • 透析下机上机
  • 体重脱水
  • 透析记录历史
  • 下次透析
  • 设置干体重设置舒适体重设置脱水上限

核心功能

1. 记录下机体重

用户说"下机 59.6"或类似格式时自动记录:

  • 提取体重数值(支持:小数、整数)
  • 可选血压(如"下机 59.6 血压 140/90")
  • 可选备注(如"下机 59.6 备注 有点头晕")
  • 自动计算距上次透析天数
  • 自动判断是否达到干体重/舒适体重

支持格式:

  • 下机 59.6
  • 下机59.6
  • 下机 59.6 血压 140/90
  • 下机 59.6 备注 头晕

2. 记录上机体重

用户说"上机 63.5"时自动计算:

  • 计算体重增长(本次 - 上次下机)
  • 计算体重增长百分比
  • 计算建议脱水量(不超过上限和体重增长)
  • 计算超滤率 (ml/h)
  • 预计透析后体重
  • 超重警告(超过3400ml时提醒)
  • 喝水建议(根据间隔天数)

支持格式:

  • 上机 63.5
  • 上机63.5 血压 150/95

3. 查看历史记录

用户说"透析记录"或"历史"时:

  • 显示最近10次透析记录表格
  • 包含:日期、上机体重、下机体重、脱水量、间隔天数
  • 趋势分析:平均脱水量、近3次平均体重增长
  • 血压趋势(如果有记录)

4. 下次透析参考

用户说"下次透析"时:

  • 显示上次下机体重和脱水量
  • 距上次透析天数
  • 根据间隔天数给出安全体重增长范围
  • 每日喝水建议上限

5. 修改设置

用户可调整个人参数:

  • 设置干体重 60.5 - 干体重 (kg)
  • 设置舒适体重 59 - 舒适体重 (kg)
  • 设置脱水上限 3500 - 脱水上限 (ml)

6. 查看设置

  • 透析设置设置 - 显示当前所有参数

数据存储

文件位置:/other/透析数据(勿删)/dialysis-data.json(公共空间)

数据格式:

{
  "settings": {
    "dryWeight": 60.8,
    "comfortWeight": 59.5,
    "maxRemoval": 3400
  },
  "records": [
    {
      "date": "2026-04-13",
      "preWeight": 63.5,
      "postWeight": 59.6,
      "preBp": "150/95",
      "postBp": "140/90",
      "removal": 3900,
      "intervalDays": 1,
      "notes": "有点头晕",
      "timestamp": "2026-04-13T09:15:00"
    }
  ]
}

响应示例

记录下机

✅ 已记录下机体重: 59.6 kg
🩺 血压: 140/90
🎯 达到舒适体重!
📝 备注: 有点头晕

记录上机

📋 透析设置建议

🖊️ 上机体重: 63.5 kg
💧 体重增长: 3900 ml (6.1%)
💧 建议脱水量: 3400 ml
⏱️ 超滤率: 850 ml/h
🎯 预计下机: 60.1 kg
🩺 上机血压: 150/95
🎯 预计可达干体重
⚠️ 体重增长 3900ml,已达上限!
💧 建议今日饮水: ≤ 1360 ml

━━━━━━━━━━━━━━━━━━━━━━

🏥 目标参考:
   干体重: 60.8 kg
   舒适体重: 59.5 kg
   脱水上限: 3400 ml

祝透析顺利!💪

历史记录

📊 透析历史记录 (最近10次)
━━━━━━━━━━━━━━━━━━━━━━
日期          上机   下机   脱水 间隔
━━━━━━━━━━━━━━━━━━━━━━
2026-04-13  63.5  59.6  3400   1
2026-04-11  64.0  59.8  4200   2
...

📈 平均脱水量: 3500 ml (接近上限)
📊 近3次平均体重增长: 4000 ml
🩺 最近血压: 140/90

默认参数

  • 干体重: 60.8 kg
  • 舒适体重: 59.5 kg
  • 脱水上限: 3400 ml

技术实现

脚本位置:/home/node/.openclaw/workspace/skills/dialysis/dialysis.py

调用方式:通过 Python 脚本处理用户消息,返回格式化结果。

注意事项

  1. 体重单位为 kg,脱水量单位为 ml
  2. 血压格式支持:xxx/xx(如 140/90)
  3. 超滤率按4小时透析计算
  4. 体重增长超过脱水上限时会发出警告
  5. 所有记录自动保存到本地 JSON 文件

Comments

Loading comments...