Medical Advice

Security checks across static analysis, malware telemetry, and agentic risk

Overview

The skill is coherent and purpose-aligned, but users should remember it gives informational medical guidance and may use public medical APIs.

Before installing, be comfortable with the skill providing non-diagnostic medical guidance, running its included Python lookup scripts, and sending general medical or drug search terms to PubMed/OpenFDA. Do not treat its answers as a substitute for a clinician, and avoid sharing identifiable health details unless necessary.

Static analysis

No static analysis findings were reported for this release.

VirusTotal

VirusTotal findings are pending for this skill version.

View on VirusTotal

Risk analysis

Artifact-based informational review of SKILL.md, metadata, install specs, static scan signals, and capability signals. ClawScan does not execute the skill or run runtime probes.

What this means

Users could be influenced in health decisions, so advice should remain informational rather than a diagnosis or treatment plan.

Why it was flagged

The skill operates in a medical-advice context where users may over-trust outputs, but the artifact explicitly requires a disclaimer and escalation to professional care.

Skill content
⚠️ **重要提醒**:我不是医生,以上建议仅供参考,不能替代专业医疗诊断。如果症状严重或持续不缓解,请及时就医。
Recommendation

Use the skill for general information and triage questions, and seek professional or emergency medical care for serious, worsening, or uncertain symptoms.

What this means

The agent may run local helper scripts for searches if the user asks for literature or drug information.

Why it was flagged

The skill documents running included Python helper scripts to query medical databases; this local command execution is disclosed and central to the stated purpose.

Skill content
python skills/medical-advice/scripts/query_pubmed.py "cough treatment" --limit 5
Recommendation

Review or restrict script execution if you do not want the agent running local Python commands; otherwise this appears aligned with the skill’s API-query function.

What this means

Medical or medication queries may be shared with public API providers when the lookup features are used.

Why it was flagged

The skill discloses external PubMed and OpenFDA lookups, which can send health, disease, or drug search terms outside the local conversation.

Skill content
集成 PubMed 医学文献搜索和 OpenFDA 药品信息查询
Recommendation

Avoid including names, identifiers, or unnecessary personal details in API-bound search terms, and use general medical keywords when possible.