Security audit
Ai Claims Assessment
Security checks for vulnerabilities and agentic risk
Overview
This skill is a read-only healthcare compliance review aid that analyzes user-provided public documents and does not request execution, network access, persistence, or sensitive local access.
Installers should understand that the skill is for public-document compliance triage, not legal advice or evidence of actual PHI handling. Provide only documents you intend the agent to read, and have a qualified reviewer validate any resulting gap analysis before using it in vendor decisions.
Vulnerability Patterns
- Prompt InjectionInstruction Override, Hidden Instructions, Exfiltration Commands
- Data ExfiltrationExternal Transmission, Env Variable Harvesting, File System Enumeration
- Privilege EscalationExcessive Permissions, Sudo/Root Execution, Credential Access
- Supply ChainUnpinned Dependencies, External Script Fetching, Obfuscated Code
- Excessive AgencyUnrestricted Tool Access, Autonomous Decision Making, Scope Creep
Static analysis
No suspicious patterns detected.