Updated today
by aks129
HealthClawGuardrails
Open-source guardrails between AI agents and FHIR clinical data — PHI redaction, immutable audit, step-up auth, tenant isolation. MCP server + OpenAI/Gemini adapters. A healthclaw.io project.
31 GitHub stars (31)
+1 in 16 days
| Period | New stars |
|---|---|
| Oct 1 | 0 |
| Oct 2 | 0 |
| Oct 3 | 0 |
| Oct 4 | 0 |
| Oct 5 | 0 |
| Oct 6 | 0 |
| Oct 7 | 0 |
| Oct 8 | 0 |
| Oct 9 | 0 |
| Oct 10 | 0 |
| Oct 11 | +1 |
| Oct 12 | 0 |
| Oct 13 | 0 |
| Oct 14 | 0 |
| Oct 15 | 0 |
| Oct 16 | 0 |
- 14 skills (14 skills found in its SKILL.md files)
- 12 forks (12 forks)
- Today last update (Last updated today)
Install
Skills CLI
npx skills add aks129/HealthClawGuardrails
Asks which skills and agents to install. Just one: npx skills add aks129/HealthClawGuardrails --skill check-sources — add -g for every project.
Claude Code
git clone https://github.com/aks129/HealthClawGuardrailscp -r "HealthClawGuardrails/skills/check-sources" ~/.claude/skills/
Copies the check-sources skill into ~/.claude/skills/ for every project (use .claude/skills/ for one project). Repeat for the other skills listed below.
Plugin
/plugin marketplace add aks129/HealthClawGuardrails
Run inside Claude Code if the repository ships a plugin marketplace, then pick plugins from /plugin.
Skills can run code on your machine — read the SKILL.md first.
What it does
In the author's own words, from each skill's SKILL.md.
-
check-sources
Survey ALL connected health data sources at once. Use when the patient asks: (1) "what's connected" or "what services are linked", (2) "check all my services / all my data", (3) "do you have my records" or "what records do you have", (4) "did my data come through from <Fasten/MEDENT/HealthEx/Health Bank One/Flexpa/Epic/wearables>". Calls fhir_get_token (for protected tenants) then sources_check,…
skills/check-sources/SKILL.md on GitHub (opens in a new tab) -
curatr
HealthClaw Curatr (healthclaw.io) — patient-facing FHIR data quality evaluation and correction. Use when: (1) Evaluating a patient's health record for coding issues (deprecated code systems, invalid codes, missing required fields), (2) Presenting issues in plain language with clinical impact, (3) Applying patient-approved corrections with full Provenance tracking, (4) Preparing a structured corre…
skills/curatr/SKILL.md on GitHub (opens in a new tab) -
fasten-connect
Use this skill whenever connecting a patient's real health records from EHR systems (Epic, Cerner, Athena) or the TEFCA national network into HealthClaw Guardrails. Covers: Fasten Stitch widget embed, org_connection_id registration, EHI export job tracking, NDJSON ingestion status, TEFCA IAS identity-verified multi-provider retrieval, and post-import Curatr quality scan workflow.
skills/fasten-connect/SKILL.md on GitHub (opens in a new tab) -
fhir-r6-guardrails
HealthClaw Guardrails (healthclaw.io) — FHIR agent guardrails for clinical data access via MCP. Supports FHIR R4 US Core v9 (stable) and FHIR R6 ballot3 (experimental). Use when: (1) Reading patient data through MCP tools with automatic PHI redaction, (2) Writing clinical resources with two-phase propose/commit and step-up authorization, (3) Querying observation statistics or recent lab results,…
skills/fhir-r6-guardrails/SKILL.md on GitHub (opens in a new tab) -
fhir-upstream-proxy
Connect to real FHIR servers through the MCP guardrail proxy. Use when: (1) Connecting to HAPI FHIR, SMART Health IT, or Epic sandbox servers, (2) Proxying AI agent requests to production EHR systems with guardrails, (3) Ensuring upstream server URLs never leak to clients, (4) Understanding how redaction, audit, and step-up auth apply to upstream data.
skills/fhir-upstream-proxy/SKILL.md on GitHub (opens in a new tab) -
getting-started
End-to-end onboarding for the HealthClaw + OpenClaw personal-health-agent stack. Walks anyone — not just developers — through (1) installing OpenClaw as the local AI gateway, (2) standing up an open-source FHIR server (HAPI or Medplum) on their machine, (3) connecting their EHR records via HealthEx, Josh Mandel's fhir-skills, Flexpa, or any patient-right-of-access / TEFCA IAS service, (4) install…
skills/getting-started/SKILL.md on GitHub (opens in a new tab) -
healthbankone
Pull verified medical records and digital-identity context from Health Bank One (https://www.healthbankone.com) via their MCP server. HBO uses OAuth 2.x with per-consumer authorization, so this skill drives an authorization-code grant first, then runs the MCP pull, then ingests the redacted bundle into a HealthClaw tenant. Use when the user wants to add HBO as a source alongside HealthEx and Fast…
skills/healthbankone/SKILL.md on GitHub (opens in a new tab) -
healthex-export-redacted
HealthEx → HealthClaw-redacted export via the official MCP Python SDK (mcp>=1.2). Use when: (1) Pulling fresh clinical data from HealthEx as the upstream source of truth (not from the local HealthClaw store), (2) Writing a PHI-redacted snapshot to disk before any ingest, so the raw MCP response never hits the filesystem, (3) Producing a single-file JSON or NDJSON bundle for downstream import via…
skills/healthex-export-redacted/SKILL.md on GitHub (opens in a new tab) -
healthex-export
HealthClaw HealthEx Export (healthclaw.io) — automated personal health record export from the local HealthClaw FHIR store. Use when: (1) The patient wants to export all their health data from the HealthClaw local store as a portable FHIR bundle, (2) Migrating health data to a new tenant or archive, (3) Creating a de-identified snapshot for sharing with a provider or second opinion, (4) Pre-screen…
skills/healthex-export/SKILL.md on GitHub (opens in a new tab) -
hermes
Run the HealthClaw guardrail stack inside Hermes, Nous Research's self-improving AI agent. Same conversational gateway and same compliance goals as the OpenClaw integration, but with Hermes' learning loop — skills that improve from experience, conversation memory across sessions, and native MCP support over Streamable HTTP. Triggers when a user asks about Hermes, the agentskills.io standard, SOUL…
skills/hermes/SKILL.md on GitHub (opens in a new tab) -
hypertension-coordinator
Sally-PCP hypertension follow-up coordination skill. Use when: (1) Running BP check-in calls for landline patients (Rosa pattern — Bland.ai outbound voice with staff confirmation), (2) Flagging undiagnosed elevated readings (≥3 observations ≥140/90 across encounters) for PCP discussion, (3) Escalation scheduling when readings trend above the patient's baseline, (4) Medication refill coordination…
skills/hypertension-coordinator/SKILL.md on GitHub (opens in a new tab) -
personal-health-records
Connect your health records from any US health system via HealthEx, pull your complete clinical history, analyze it with Claude, and optionally export to a personal de-identified FHIR store with automated data quality curation via HealthClaw Guardrails. Supports Epic, Cerner, CommonWell, Carequality, and most major US EHR networks. Triggers when a user asks to connect health records, pull medical…
skills/personal-health-records/SKILL.md on GitHub (opens in a new tab) -
phi-redaction
Conservative PHI redaction patterns for FHIR resources. Use when: (1) Redacting patient health information from FHIR resources before AI agent access, (2) Implementing de-identification for clinical data pipelines, (3) Understanding what fields are stripped, masked, or truncated in FHIR resources, (4) Building read paths that automatically protect patient privacy.
skills/phi-redaction/SKILL.md on GitHub (opens in a new tab) -
share-health-qr
Generate a patient-controlled SMART Health Link (SHL) QR code for sharing health records with a clinic or provider. Use when: (1) A patient asks to share their records via QR for clinic check-in, (2) A patient asks to generate a health QR code, (3) A patient asks to "share my records" or "generate a QR with my records". Covers the full consent → fhir_get_token → shl_generate → QR render + manage-…
skills/share-health-qr/SKILL.md on GitHub (opens in a new tab)
No skill matches that filter.
Review before you install
A skill is a set of instructions and scripts your agent will follow, and it can run code on your machine. Read the SKILL.md and any scripts first — this listing is not a security review.