open-health-link

• Analyzed: May 13, 2026, 8:46 AM
• Findings: 1
• Version: 1.0.6
• Hash: 63165c84d2a22d3f6d3cfec3831293e545ce9a8ad6cc01f3646377a75dce465f
• Source: palm
• External report: View on VirusTotal

Findings (1)

The skill bundle is a legitimate integration for the breo Scalp5 health device, allowing users to bind accounts, view scalp health reports, and access care plans. The scripts (e.g., `fetch-report-list.js`, `poll-auth.js`) interact with official breo API endpoints (`op.breo.cn`) and a validated Huawei Cloud OBS bucket for knowledge base CSVs. The `SKILL.md` instructions include robust 'Fact Consistency' and 'Output Standards' to prevent AI hallucinations and the leaking of technical metadata, which are positive safety constraints rather than malicious prompt injections.