Skill flagged — suspicious patterns detected

ClawHub Security flagged this skill as suspicious. Review the scan results before using.

건강보험심사평가원 병원 검색

v3.2.0

HIRA hospital information search API

0· 577·0 current·0 all-time
by김성우@sw326

Install

OpenClaw Prompt Flow

Install with OpenClaw

Best for remote or guided setup. Copy the exact prompt, then paste it into OpenClaw for sw326/hira-hospital.

Previewing Install & Setup.
Prompt PreviewInstall & Setup
Install the skill "건강보험심사평가원 병원 검색" (sw326/hira-hospital) from ClawHub.
Skill page: https://clawhub.ai/sw326/hira-hospital
Keep the work scoped to this skill only.
After install, inspect the skill metadata and help me finish setup.
Use only the metadata you can verify from ClawHub; do not invent missing requirements.
Ask before making any broader environment changes.

Command Line

CLI Commands

Use the direct CLI path if you want to install manually and keep every step visible.

OpenClaw CLI

Bare skill slug

openclaw skills install hira-hospital

ClawHub CLI

Package manager switcher

npx clawhub@latest install hira-hospital
Security Scan
VirusTotalVirusTotal
Suspicious
View report →
OpenClawOpenClaw
Benign
high confidence
Purpose & Capability
The name/description (HIRA hospital search) align with the included scripts which call apis.data.go.kr endpoints. Minor inconsistency: the registry metadata declares no required binaries or env vars, but the scripts require a local API key file (~/.config/data-go-kr/api_key) and expect tools like curl and python3 to be available.
Instruction Scope
Runtime instructions and scripts only read the API key file in the user's home config, call HIRA/data.go.kr endpoints, and parse responses locally. They do not reference unrelated system files, other credentials, or external endpoints beyond the public data.go.kr API. SKILL.md mentions optional connectors (Brave/Telegram) as placeholders but the scripts do not call those services.
Install Mechanism
No install/spec download is provided (instruction-only with bundled scripts). Nothing in the install surface pulls remote code or writes files to unexpected locations.
Credentials
The skill requires a HIRA/data.go.kr API key stored at ~/.config/data-go-kr/api_key (documented in SKILL.md and used by scripts). Registry fields list no required env vars — this omission is a bookkeeping mismatch but not a functional surprise. The requested credential is narrowly scoped to the public API and is proportionate to the purpose.
Persistence & Privilege
always:false and the skill does not attempt to modify other skills or system-wide agent settings. It runs on-demand and does not request persistent elevated privileges.
Assessment
This skill appears to do what it says: call the public HIRA/data.go.kr hospital APIs using a user-provided API key file. Before installing or running it: 1) Ensure you are comfortable storing your data.go.kr API key at ~/.config/data-go-kr/api_key and set tight file permissions (chmod 600). 2) Verify you have curl and python3 available — the registry metadata omitted those requirements. 3) Review the scripts locally (they're simple) and be aware of a minor bug in scripts/hospital.sh where a shell variable is used incorrectly in the embedded Python filter (it may not filter by hospital type as intended). 4) Run in a sandbox or test account if you want to avoid exposing your real API key while testing. 5) If you need connectors (Brave/Telegram) note that SKILL.md only lists them as placeholders—no code in the bundle sends data to those services.

Like a lobster shell, security has layers — review code before you run it.

healthvk9779fy2e7hzgrjba52vdqjns581n27xhospitalvk9779fy2e7hzgrjba52vdqjns581n27xkoreavk9779fy2e7hzgrjba52vdqjns581n27xkoreanvk9779fy2e7hzgrjba52vdqjns581n27xlatestvk9779fy2e7hzgrjba52vdqjns581n27x
577downloads
0stars
1versions
Updated 12h ago
v3.2.0
MIT-0

Hospital Info Skill

HIRA (Health Insurance Review & Assessment Service) hospital search + detail lookup.

Overview

ServiceIDEndpointPurpose
Hospital Info15001698hospInfoServicev2Hospital list search
Detail Info15001699MadmDtlInfoService2.7Departments, hours, transport
KeyValue
Auth~/.config/data-go-kr/api_key
Base URLhttps://apis.data.go.kr/B551182/
Legal basisNational Health Insurance Act §43

Scripts

scripts/
├── hospital_search.sh  → Search hospitals (name/region/type/dept)
└── hospital_detail.sh  → Hospital detail (parallel API calls)

Workflow

Step 1: Parse search criteria

  • "근처 이비인후과" → region + department search
  • "서울대병원 진료시간" → specific hospital detail
  • ~~search to supplement hospital name/location

Step 2: Search hospitals

  • hospital_search.sh [criteria]

Step 3: Detail lookup (if needed)

  • hospital_detail.sh [institution_code]

Step 4: Structured response

Output Template

## 🏥 [Query] Hospital Results

| Hospital | Type | Address | Phone | Departments |
|----------|------|---------|-------|-------------|

### [Hospital Name] Detail (on request)
- 📍 Address: ...
- ☎️ Phone: ...
- 🕐 Hours: ...
- 🚗 Transport: ...

Connectors

PlaceholderPurposeCurrent Tool
~~hospitalHospital APIHIRA data.go.kr
~~searchName/location supplementBrave Search
~~notifyAlertsTelegram

Intent Router

IntentTrigger ExamplesStrategy
Quick Search"근처 이비인후과", "강남 피부과", "소아과 찾아줘"hospital_search.sh → 지역+진료과목 검색 → 목록
Detail Lookup"이 병원 정보 자세히", "진료시간 알려줘", "주차 되나?"hospital_detail.sh → 진료시간, 교통, 진료과목 상세

Routing logic: 검색/찾기/추천 → Quick Search, 특정 병원 + 상세/시간/교통 → Detail Lookup

Cross-Skill Integration

TriggerTarget SkillIntegration
병원 검색 결과 보충web_search (Brave)병원 리뷰·평판·홈페이지 보충 검색
외출 시 참고kma-weather비/추위 예보 시 "따뜻하게 입고 가세요" 팁

Cowork architecture v3.2 — 🦞 chumjibot (2026-02-19)

🔧 Setup (공공데이터 포털 API)

  1. data.go.kr 회원가입
  2. 로그인 → 마이페이지 → 일반 인증키(Decoding) 복사
  3. API 키 저장:
    mkdir -p ~/.config/data-go-kr
    echo "YOUR_API_KEY" > ~/.config/data-go-kr/api_key
    
  4. 아래 서비스 활용신청 후 사용 (자동승인)

Comments

Loading comments...