Fda Consultant Specialist

PassAudited by ClawScan on May 1, 2026.

Overview

The visible artifacts are coherent with an FDA regulatory consulting skill and show no evidence of malicious behavior, though the package includes helper scripts from an unknown source without an install/run contract.

This appears to be a benign FDA/HIPAA/QSR guidance skill. Because it may be used for sensitive medical-device and HIPAA topics, avoid pasting real patient identifiers or confidential submission materials unless your workspace is approved for that data, and review the included helper scripts before running them.

Findings (1)

Artifact-based informational review of SKILL.md, metadata, install specs, static scan signals, and capability signals. ClawScan does not execute the skill or run runtime probes.

Low

#ASI04: Agentic Supply Chain Vulnerabilities

What this means

If a user or agent later runs the helper scripts, they should know the source is not identified and the install metadata does not describe how those scripts are intended to be used.

Why it was flagged

The package has helper scripts and no visible provenance or install/run contract. The script names fit the stated FDA/HIPAA/QSR purpose, and static scan signals are clean, so this is a review note rather than a concern.

Skill content

Source: unknown; Homepage: none; No install spec — this is an instruction-only skill; Code file presence: 3 code file(s): scripts/fda_submission_tracker.py, scripts/hipaa_risk_assessment.py, scripts/qsr_compliance_checker.py

Recommendation

Install only if you trust the publisher, and inspect or run any helper scripts only when explicitly needed for the regulatory task.