Health Guide
ReviewAudited by ClawScan on May 1, 2026.
Overview
Health Guide is a coherent instruction-only medical information skill, with the main cautions being external health-related searches, optional local API-key files, and a referenced hospital-search dependency.
This skill appears safe to install for general health-information use, but treat it as informational rather than medical diagnosis. Be careful with sensitive symptoms, drug names, location details, and API keys; review any linked hospital-search skill separately, and call 119 or appropriate crisis services in emergencies.
Findings (4)
Artifact-based informational review of SKILL.md, metadata, install specs, static scan signals, and capability signals. ClawScan does not execute the skill or run runtime probes.
Search or API providers may see health-related terms the user enters.
The skill may send disease, symptom, or drug terms to external search/providers. This is disclosed and purpose-aligned, but health-related queries can be sensitive.
web_search: "[질환명] 국가건강정보포털" ... web_search: "질병관리청 [증상] 정보" ... web_search: "[약품명] 식약처 e약은요"
Use minimal, non-identifying search terms; avoid including names, resident numbers, addresses, or other personal details; prefer official sources when available.
If local file permissions are loose or the device is shared, these API keys could be read by others.
The skill documents optional API-key storage in local files. This matches the stated API integrations, with no evidence of leakage, but the files are persistent credentials.
키 저장: `mkdir -p ~/.config/kdca && echo "YOUR_KEY" > ~/.config/kdca/api_key` ... `~/.config/data-go-kr/api_key`
Store only the intended public-service API keys, restrict file permissions, and do not reuse sensitive personal or account tokens for these paths.
Hospital search results and any behavior of that helper depend on another installed skill or script.
Hospital lookup is delegated to an external skill script that is not part of this artifact set. The dependency is expected for the stated purpose, but its implementation and provenance are outside these artifacts.
bash skills/hira-hospital/scripts/hospital_search.sh "[지역]" "[진료과]"
Review and trust the hira-hospital skill separately before enabling hospital-search delegation.
If these declarations map to install-time permissions, the skill may request a broader tool surface than the documented health-guide workflow needs.
The declared connectors include hospital/search, which fit the purpose, plus notify/docs, which are not otherwise scoped in the supplied workflow.
connectors: [~~hospital, ~~search, ~~notify, ~~docs]
Grant only the connectors needed for the intended use, and remove or deny notify/docs access unless a clear, documented workflow requires them.