Security audit
Curatr
Security checks for vulnerabilities and agentic risk
Overview
Curatr is a disclosed health-record quality review skill with patient-approved correction workflows, but users should treat it carefully because it handles sensitive medical data and can write corrected records.
Before installing, confirm what FHIR store this stack can read or write, keep STEP_UP_SECRET private, avoid sending unnecessary patient details to public terminology services, and require explicit patient confirmation before any correction is applied.
Vulnerability Patterns
- Prompt InjectionInstruction Override, Hidden Instructions, Exfiltration Commands
- Data ExfiltrationExternal Transmission, Env Variable Harvesting, File System Enumeration
- Privilege EscalationExcessive Permissions, Sudo/Root Execution, Credential Access
- Supply ChainUnpinned Dependencies, External Script Fetching, Obfuscated Code
- Excessive AgencyUnrestricted Tool Access, Autonomous Decision Making, Scope Creep
Static analysis
No suspicious patterns detected.