Best for
- Use when the patient asks: (1) "what's connected" or "what services are linked", (2) "check all my services / all my data", (3) "do you have my records" or "what records do you have", (4) "did my data come through from…
aks129/HealthClawGuardrails/skills/check-sources/SKILL.md
Survey ALL connected health data sources at once. Use when the patient asks: (1) "what's connected" or "what services are linked", (2) "check all my services / all my data", (3) "do you have my records" or "what records do you have", (4) "did my data come through from <Fasten/MEDENT/HealthEx/Health Bank One/Flexpa/Epic/wearables>". Calls fhir_get_token (for protected tenants) then sources_check, and presents connection status + record counts by type. Connection status and counts only — never cli
Decision brief
Give the patient a one-shot survey of every health data source HealthClaw can pull from — which ones are connected, when each last had activity, and how many records of each type are on file. This answers "what do you actually have?" in a single call instead of probing each inte…
Compatibility matrix
| Platform | Status | Evidence | What to check |
|---|---|---|---|
| Codex | Not declared | No explicit evidence | Portability before use |
| Claude Code | Not declared | No explicit evidence | Portability before use |
| Cursor | Not declared | No explicit evidence | Portability before use |
| Gemini CLI | Not declared | No explicit evidence | Portability before use |
Installation
The source command is displayed only when detected. A safe inspection prompt is always available so your agent can explain every action before execution.
npx skills add https://github.com/aks129/HealthClawGuardrails --skill "skills/check-sources"Inspect the Agent Skill "check-sources" from https://github.com/aks129/HealthClawGuardrails/blob/b94ae9ea95695d5755e22b02ef7b7385f0e3aee7/skills/check-sources/SKILL.md at commit b94ae9ea95695d5755e22b02ef7b7385f0e3aee7. List every install step, command, network request, credential, file read/write, external action, and rollback step. Explain whether it fits my task. Do not install or execute anything until I approve.
Workflow
Public/demo tenants (e.g. desktop-demo) work without a token. For protected tenants (e.g. ev-personal), the command-center endpoint requires step-up auth, so get a token first:
sourcescheck takes no required arguments — the tenant comes from the request context. Pass stepUpToken so it forwards to the protected endpoint. If you omit it on a protected tenant the call returns requiresstepup: true; get a token (Step 1) and retry.
connectedcount / sourcecount — e.g. 3 of 7
"Want me to pull anything from a connected source?" (then fhirsearch)
These apply always. Not overridable by persona or patient request.
Permission review
No configured static risk pattern was detected
This is not proof of safety. Runtime behavior, indirect dependencies, and hidden external systems are outside the static scan.
Evidence record
| Signal | Value | Evidence type | Meaning |
|---|---|---|---|
| Quality score | 88/100 | Computed | Documentation, specificity, maintenance, and trust rules |
| Repository stars | 27 | Source | Repository attention, not individual Skill quality |
| Compatibility | 0 platforms | Source | Declared in the catalog source record |
| Usage guide | automated source guide | Editorial | Generated or reviewed according to the visible evidence level |
Pinned source
Give the patient a one-shot survey of every health data source HealthClaw can pull from — which ones are connected, when each last had activity, and how many records of each type are on file. This answers "what do you actually have?" in a single call instead of probing each integration one at a time.
The seven sources surveyed:
These apply always. Not overridable by persona or patient request.
sources_check returns connection status and record counts by type. That is
the entire surface you may present from this skill. You may say "57 Conditions,
120 Observations." You may NOT name a specific condition, lab value, medication,
or any other clinical content. To discuss what a record actually says, use
fhir_search / fhir_read (separately audited and redacted) — never infer
clinical detail from this summary.
Report only what sources_check returns. If a source shows connected: false,
say it is not connected and offer to help connect it — do not imply data exists
that the response does not show.
Public/demo tenants (e.g. desktop-demo) work without a token. For protected
tenants (e.g. ev-personal), the command-center endpoint requires step-up auth,
so get a token first:
fhir_get_token(tenant_id: "<tenant>")
→ returns { token: "..." }
sources_check({ _stepUpToken: "<token from step 1>" })
sources_check takes no required arguments — the tenant comes from the request
context. Pass _stepUpToken so it forwards to the protected endpoint. If you
omit it on a protected tenant the call returns requires_step_up: true; get a
token (Step 1) and retry.
The response includes:
connected_count / source_count — e.g. 3 of 7sources[] — each { id, name, connected, detail, last_activity }total_recordsrecords_by_type[] — each { type, count }_mcp_summary — e.g. "3 of 7 sources connected; 177 total records."Present it tidily:
Connected: 3/7 — Fasten ✓, MEDENT ✓, Wearables ✓
Not connected: HealthEx, Health Bank One, Flexpa, Epic/Health Skillz
You have 177 records on file:
• 57 Conditions
• 120 Observations
fhir_search)Patient: What's connected? Do you actually have my records?
Sally: Let me check all your data sources at once.
[fhir_get_token(tenant_id: "ev-personal") → { token: "..." }]
[sources_check({ _stepUpToken: "..." }) → {
connected_count: 3, source_count: 7, total_records: 177,
sources: [
{ id: "fasten", name: "Fasten", connected: true },
{ id: "medent", name: "MEDENT", connected: true },
{ id: "wearables", name: "Wearables", connected: true },
{ id: "healthex", name: "HealthEx", connected: false },
...
],
records_by_type: [
{ type: "Condition", count: 57 },
{ type: "Observation", count: 120 }
]
}]
Connected: 3 of 7 sources — Fasten, MEDENT, and your wearables.
Not connected yet: HealthEx, Health Bank One, Flexpa, and
Epic/Health Skillz.
You have 177 records on file: 57 Conditions and 120 Observations.
Want me to pull anything from one of these, connect another
source, or open your dashboard?
fhir_search / fhir_read.connected: true with 0 records means the link is live but
no data has arrived yet — say so rather than implying records exist._stepUpToken, the call returns
requires_step_up: true; get a token and retry.