scaffolding-smart-on-fhir SKILL.md skillA
scaffolding-smart-on-fhir from maziyarpanahi/openmed is an agent skill: a SKILL.md folder an AI agent loads when a task calls for it.
mdr add maziyarpanahi/openmed/scaffolding-smart-on-fhir@v1.0Pins v1.0 in mdr.lock. Pin the fingerprint instead.
- Audit grade
- A, 17 of 17 checks passed
- Kind
- SKILL.md skill
- Repository
- maziyarpanahi/openmed
- Path
skills/scaffolding-smart-on-fhir/SKILL.md- Versions recorded
- 1
- Latest version
- v1.0, committed Jul 20, 2026
- Size
- 7,599 bytes
- Repository stars
- 5,784
- License
- Apache-2.0
Scaffold a SMART-on-FHIR app (SMART App Launch v2 — EHR launch and standalone launch, OAuth2 PKCE, scopes, token handling, fhirContext) so an OpenMed-powered tool can run inside Epic or Cerner/Oracle Health. Covers the .well-known/smart-configuration discovery, authorize/token sequence, scopes like patient/DocumentReference.rs and launch/patient, and fetching clinical notes the app then de-identifies and runs NER on locally with OpenMed. Use when the user wants to embed OpenMed inside an EHR…
Collected from public GitHub. Every version is saved exactly as it was and never changes. Install it at an exact version with the mdr tool, and every file is checked before it reaches your agent. The main file is checked against the SHA-256 fingerprint recorded here, and the others against the fingerprints GitHub keeps for its source commit. The automatic checks below grade the latest version, and the same checks always give the same file the same grade.
What the file says
# Scaffolding SMART on FHIR To put an OpenMed-powered tool *inside* a clinician's EHR (Epic, Cerner/Oracle Health), you build a **SMART on FHIR** app: a web app the EHR launches with an OAuth2 flow, granting scoped, time-limited access to the patient's FHIR data. The app fetches the clinical notes, then runs OpenMed **on-device** (de-id + NER) — so PHI is processed locally and only de-identified output, if anything, leaves the browser/host. ## When to use Reach for this when the deliverable is a clinician-facing app embedded in an EHR, or a standalone app authorizing against an EHR's FHIR endpoint. Triggers: "SMART on FHIR", "EHR launch", "OAuth2 scopes", "Epic/Cerner app", "embed OpenMed in the chart". For pulling notes at *cohort* scale (no UI), use `exporting-bulk-fhir` instead. ## Two launch flows - **EHR launch** — clinician clicks your app in the chart. The EHR opens your `launch_uri?iss=<fhir-base>&launch=<opaque>`; you complete OAuth2 and inherit the current patient/encounter context. - **Standalone launch** — user opens your app directly; it discovers the FHIR server and runs OAuth2, and the user/EHR picks the patient. …
Read the whole file at its exact version.
How to install
mdr add maziyarpanahi/openmed/scaffolding-smart-on-fhir@sha256:de04ebb4687fd223The line at the top of this page pins the label v1.0, which is what most people want. This one pins the sha256 fingerprint of the contents instead, so it survives a label being moved. Either way the exact version is written to mdr.lock, and mdr install downloads and checks those contents again, so it installs them exactly or stops with an error.
[](https://markdownregistry.com/a/art_fen4ismrainu536l)
2 badge image fetches in 30 days. What the badge shows.
Versions
The registry has recorded 1 version of this file, committed on Jul 20, 2026.
Audit of the latest version
- pass: Frontmatter block present
- pass: Frontmatter declares a name
- pass: Frontmatter declares a description
- pass: Size between 200 bytes and 200 KB (7599 bytes)
- pass: No zero-width or bidi control characters
- pass: No instruction hidden inside an HTML comment
- pass: No link to an exfiltration or paste host
- pass: No credential-shaped string
- pass: No instruction to send local credentials anywhere
- pass: No text hidden with inline styles
- pass: No prompt-injection phrasing
- pass: No curl or wget piped into a shell
- pass: No recursive delete of root, home or parent
- pass: No instruction to read or print local credentials
- pass: No base64 blob over 200 characters
- pass: No link to a raw IP address
- pass: No script tag
Source
maziyarpanahi/openmed · 5,784 stars · license Apache-2.0 · pushed 2026-11-07 · branch master
API
GET https://markdownregistry.com/api/v1/artifacts/art_fen4ismrainu536l GET https://markdownregistry.com/api/v1/resolve?ref=maziyarpanahi/openmed/scaffolding-smart-on-fhir GET https://markdownregistry.com/api/v1/blob/de04ebb4687fd223f4556ca61757c195f777ee798697c5315bff47301f14f690
Your AI assistant does the legwork. You hear about the deals worth your word. Hand yours the standing instructions at modelranch.com and it joins the network that reads files like this one.
Guides: the SKILL.md format and its required fields · what to check before you install a skill · how to pin a skill to an exact version · where to find agent skills · keeping a team on the same skills · which agent file does what.