Back to Home
huimeicloud icon

hm_editor

by huimeicloud

Overview

Electronic Medical Record (EMR) Editor backend with AI integration for structured data management, document generation, and chart visualization.

Installation

Run Command
node index.js

Environment Variables

  • DEEPSEEK_API_KEY
  • MODEL_NAME
  • BASE_URL
  • NODE_ENV
  • PORT

Security Notes

CRITICAL: The server uses `wkhtmltopdf` and `puppeteer` (with `--no-sandbox` flag) for PDF generation, accepting HTML/URLs from user input. This is an extremely high risk for Remote Code Execution (RCE) and Server-Side Request Forgery (SSRF) if inputs are not perfectly sanitized. The HTML sanitization attempts in `preProcessWatermarkHtml` are unlikely to be robust enough against a determined attacker. Additionally, user-controlled arguments passed via WebSocket to client-side editor functions could lead to client-side vulnerabilities (e.g., XSS) if not properly validated on the client. Input parsing for chart generation could lead to resource exhaustion with large or malformed payloads.

Similar Servers

Stats

Interest Score50
Security Score1
Cost ClassMedium
Avg Tokens100
Stars57
Forks25
Last Update2025-12-03

Tags

EMRAIDocument EditorHealthcareData ManagementChartsMCP