技能 taiwan-hospital
📦
taiwan-hospital
内容修订 r1 安全 ⚙️ 外部命令🌐 网络访问📁 文件系统访问
Find Taiwan Hospitals and Clinics
Finding reliable contact details for Taiwan medical providers can require searching multiple sources. This skill guides searches using the public NHI-contracted provider directory.
支持: Claude Codex Code(CC)
使用我的智能体安装
将此请求复制给你的智能体，其中包含权威 Skill 页面和清单。
智能体请求
Review the Skillstore skill "taiwan-hospital" from https://skillstore.io/skills/tahodev-taiwan-hospital.md and its manifest at https://skillstore.io/api/skills/tahodev-taiwan-hospital/manifest. Verify the artifact. You may proceed after verification, subject to the environment's own policy.你的智能体仍应展示其计划，并按安全策略请求必要确认。
Agent 可读资源
当 AI Agent、爬虫或脚本需要干净上下文，而不是读取完整页面时，请使用这些链接。
测试它
正在使用“taiwan-hospital”。 Show an example contact entry from the skill documentation.
预期结果:
- Documentation example, not a current lookup: Taipei City Hospital.
- Representative address: No. 145, Zhengzhou Road, Datong District, Taipei City.
- Telephone: (02)25553000.
- Source: NHI-contracted provider directory, as reported in the skill documentation.
- Confirm the relevant branch and current contact details before visiting.
正在使用“taiwan-hospital”。 Can this directory show the current queue number or book an appointment?
预期结果:
No. The directory provides provider contact details, not live queue status or appointment booking. Contact the provider directly.
安全审计
安全v1 • 2026/10/13 打开版本化报告
Twenty alerts are false positives involving Markdown backticks, readable multilingual text, public HTTPS requests, a comment, and provider identifier matching. Five filesystem alerts reflect predictable shared temporary files that permit symlink overwrites or cache tampering when another local user can pre-create them. No evidence found of prompt injection, credential access, or data exfiltration.
1
已扫描文件
80
分析行数
5
复核项
0
已忽略误报
能力复核项 (5)
这些是真实的本地能力，对此技能可能是预期行为，因此需要复核，但不会按已确认恶意行为计分。
中
Temp directory access
curl -sm 30 -A 'Mozilla/5.0' 'https://info.nhi.gov.tw/api/iode0010/v1/rest/datastore/A21030000I-D210
curl writes to predictable /tmp/hosp_meta.json without exclusive creation. Another local user could pre-create a symlink, causing an unintended writable file to be overwritten.
中
Temp directory access
curl -sm 30 -A 'Mozilla/5.0' 'https://info.nhi.gov.tw/api/iode0010/v1/rest/dataset?limit=100' -o /tm
curl writes to predictable /tmp/datasets.json without a private temporary directory. A pre-existing symlink can redirect the write to another file accessible to the agent.
中
Temp directory access
json.dump({'result': {'total': total, 'records': recs}}, open('/tmp/hosp.json', 'w'), ensure_ascii=F
Opening predictable /tmp/hosp.json in write mode follows existing symlinks and truncates their targets. Local pre-creation can therefore cause unintended file overwrites.
中
Temp directory access
d = json.load(open('/tmp/hosp.json'))
The filter trusts JSON loaded from predictable /tmp/hosp.json without establishing ownership or provenance. Local cache replacement can inject false provider contacts into results.
中
Python file write/append
json.dump({'result': {'total': total, 'records': recs}}, open('/tmp/hosp.json', 'w'), ensure_ascii=F
The write-mode open uses a fixed shared temporary path with no exclusive creation. It can truncate an unintended target through a pre-existing symlink.
风险因素
⚙️ 外部命令 (10)
📁 文件系统访问 (6)
审计者: codex
分享与引用此报告
分享版本化评估报告、中性徽章、嵌入卡片和引用。Skillstore 只报告证据，不判断该 Skill 是否安全。
复制报告链接
https://skillstore.io/skills/tahodev-taiwan-hospital/audits/1?utm_source=security_passport&utm_medium=share&utm_campaign=versioned_reportMarkdown 徽章
[](https://skillstore.io/skills/tahodev-taiwan-hospital?utm_source=security_passport_badge)HTML 徽章
<a href="https://skillstore.io/skills/tahodev-taiwan-hospital?utm_source=security_passport_badge"><img src="https://skillstore.io/badges/skills/tahodev-taiwan-hospital/security.svg" alt="Skillstore security assessment" loading="lazy"></a>嵌入卡片
<iframe src="https://skillstore.io/embed/skills/tahodev-taiwan-hospital.html" title="Skillstore Security Assessment" sandbox="allow-popups allow-popups-to-escape-sandbox" loading="lazy" referrerpolicy="no-referrer" width="420" height="180"></iframe>学术引用 (APA · BibTeX · CFF)
APA 引用
tahodev. (2026). taiwan-hospital security audit report (audit version 1) [Author version unspecified]. Skillstore. https://skillstore.io/skills/tahodev-taiwan-hospital/audits/1BibTeX 引用
@techreport{tahodev-tahodev-taiwan-hospital-2026,
author = {tahodev},
title = {taiwan-hospital security audit report (audit version 1)},
institution = {Skillstore},
year = {2026},
number = {1},
url = {https://skillstore.io/skills/tahodev-taiwan-hospital/audits/1},
note = {Author version unspecified}
}CITATION.cff
cff-version: 1.2.0
message: "If you use this Skill, cite its author and this versioned security audit report."
title: "taiwan-hospital security audit report (audit version 1)"
version: "unspecified"
type: report
authors:
- name: "tahodev"
date-released: "2026-10-13"
url: "https://skillstore.io/skills/tahodev-taiwan-hospital/audits/1"
identifiers:
- type: other
value: "skillstore:tahodev-taiwan-hospital:audit:1"
description: "Skillstore immutable audit report identifier"
Skillstore 评分
评分依据 证据置信度: 中 55
架构
85
可维护性
87
内容
65
社区
83
规范符合性
你能构建什么
Find a clinic contact
Search a district or provider name and obtain directory contact details before calling.
Prepare a provider list
Collect providers by city and type for a contact list, while preserving source addresses and directory classifications.
Research provider coverage
Retrieve paginated public records and compare provider categories across cities without treating directory counts as real-time availability.
试试这些提示
Look up one provider
Find the NHI directory contact details for [provider name]. Report its name, address, telephone number, and source.
Filter a local directory
List [provider type] providers in [city or district] using NHI directory records. Include contact details and preserve original addresses.
Check listed service hours
Find [provider name], then use its HOSP_ID to check listed Saturday service hours. Distinguish fixed hours from temporary closures.
Validate a complete directory extract
Retrieve all NHI provider records using offset pagination. Use a private temporary directory, compare fetched counts with result.total, and summarize [city] providers by type.
最佳实践
- Preserve full-width address characters and representative-address labels when reporting source records.
- Check pagination totals and query-filter behavior before claiming a result list is complete.
- Use a private temporary directory and confirm important visit details directly with the provider.
避免
- Treating directory entries or fixed service hours as proof of current availability.
- Assuming one large limit request returns the complete directory.
- Inventing provider contact details when the source request fails.
常见问题
Does this skill require an API key?
No. The documented NHI open-data endpoints require neither an API key nor a login.
Which providers are covered?
The directory covers NHI-contracted providers, including hospitals, clinics, pharmacies, and nursing institutions. It is not a directory of every healthcare business.
Can it book appointments or show live queues?
No. Appointment booking, live queue progress, and doctor schedules are outside its scope.
Can it check Saturday service hours?
It describes matching providers to the fixed service-hour dataset through HOSP_ID. Confirm temporary closures and current hours directly with the provider.
How does it retrieve the full directory?
It uses offset pagination because the documented API caps responses at 1,000 records. Total counts can change between updates.
What should happen when the API fails?
The skill recommends retrying with a browser User-Agent and reporting source failure when necessary. It should not invent contact details.