Drug Interaction Checker

Security checks across malware telemetry and agentic risk

Overview

The skill appears to be a purpose-aligned local drug-interaction checker, with ordinary cautions around running its Python code, installing unpinned dependencies, and saving medication results locally.

This looks safe to install from an agent-security perspective, but treat it as a local code tool: install dependencies carefully, do not run it with elevated privileges, be mindful that medication lists are sensitive, and confirm medical decisions with a qualified healthcare professional.

VirusTotal

VirusTotal findings are pending for this skill version.

View on VirusTotal

Risk analysis

Artifact-based informational review of SKILL.md, metadata, install specs, static scan signals, and capability signals. ClawScan does not execute the skill or run runtime probes.

#
ASI05: Unexpected Code Execution
Low
What this means

Using the skill means running local Python code from the package.

Why it was flagged

The skill is intended to run a local Python script. This is disclosed and central to the stated purpose, but it is still local code execution.

Skill content
python scripts/main.py --drugs "Warfarin" "Aspirin" "Ibuprofen"
Recommendation

Run it only from a trusted workspace, avoid elevated privileges, and review the script before use if you require high assurance.

#
ASI04: Agentic Supply Chain Vulnerabilities
Low
What this means

If the install step is followed, package versions may be pulled from an external package index and could change over time.

Why it was flagged

The dependency list uses bare package names without pinned versions; SKILL.md also instructs users to install from requirements.txt.

Skill content
dataclasses
enum
Recommendation

Prefer pinned, audited dependencies in a virtual environment, and consider whether these packages are actually needed for the target Python version.

#
ASI06: Memory and Context Poisoning
Info
What this means

Saved output files may persist medication information in the workspace and could be visible to others with access to that workspace.

Why it was flagged

The tool can save results that may include a user's medication list, which can be sensitive health-related information.

Skill content
`--output`, `-o` | string | - | No | Output file path
Recommendation

Avoid saving sensitive medication lists unless needed, and store or delete output files according to your privacy needs.