Lab Result Interpretation
Security checks across static analysis, malware telemetry, and agentic risk
Overview
The skill has no evidence of data theft or hidden execution, but its medical templates can make definitive diagnoses and treatment recommendations despite claiming it only explains lab values.
Use caution because this skill handles sensitive health information and some included templates may overstate medical conclusions. Do not rely on it for diagnosis or treatment decisions; verify abnormal or critical results with a qualified healthcare professional.
Static analysis
No static analysis findings were reported for this release.
VirusTotal
VirusTotal findings are pending for this skill version.
Risk analysis
Artifact-based informational review of SKILL.md, metadata, install specs, static scan signals, and capability signals. ClawScan does not execute the skill or run runtime probes.
A user could receive language that sounds like a diagnosis or treatment plan from the tool instead of from a qualified clinician.
These patient-facing templates make definitive diagnostic and treatment statements, which is materially broader than the skill's stated educational lab-explanation role and could cause unsafe reliance.
"Fasting blood glucose severely elevated; diabetes confirmed. Standardized treatment required." ... "LDL severely elevated; medication treatment strongly recommended."
Install only if you are comfortable with the medical-risk limitations; the publisher should replace definitive diagnosis/treatment wording with cautious explanations and clear instructions to consult a clinician.
Installing the requirements may fetch an external package version that is not locked or clearly needed.
The package dependency is unpinned and appears unnecessary for the documented Python >= 3.8 requirement where dataclasses is part of the standard library.
dataclasses
Review the dependency before installing; the publisher should pin or remove unnecessary dependencies.
The skill may execute local Python code and process a selected lab report file on the user's machine.
The skill documents local execution of its packaged Python script; this is expected for a CLI lab-report parser but users should know they are running local code.
python scripts/main.py --file lab_report.txt python scripts/main.py --interactive
Run it only in an environment where you are comfortable executing the packaged script and providing lab-result text or files.