UAE medical-billing-uae

PassAudited by ClawScan on May 16, 2026.

Overview

This is an instruction-only UAE medical billing guide that fits its stated purpose, but it involves patient, insurance, and payment information that should be handled carefully.

Before installing or using this skill, treat it as medical billing reference material rather than an autonomous billing operator. Verify UAE payer rules and clinic policies, keep insurer portal and bank details private, and do not share patient-identifying or clinical information unless your organization has approved privacy controls in place.

Findings (3)

Artifact-based informational review of SKILL.md, metadata, install specs, static scan signals, and capability signals. ClawScan does not execute the skill or run runtime probes.

What this means

If paired with billing or insurer tools, mistakes could affect authorizations, reimbursements, or patient charges.

Why it was flagged

The skill gives operational guidance for insurer portal submissions and claim resubmissions, which can affect billing outcomes if acted on in real systems.

Skill content
"Clinic submits pre-auth request via: ... DAMAN portal ... TPA-specific portal" and "Correct coding; resubmit with clinical notes"
Recommendation

Use the skill as guidance only unless qualified clinic staff explicitly approve each pre-authorization, claim submission, resubmission, or payment-related action.

What this means

Improper handling of provider IDs or bank details could expose clinic account information or enable unauthorized billing-related activity.

Why it was flagged

Provider credentialing and claims workflows may involve financial account details and provider identifiers. This is expected for the stated purpose but should be handled only by authorized users.

Skill content
"Submit: ... Bank account details (for direct payment)" and "Clinic provider ID"
Recommendation

Keep bank, provider, and portal account details access-controlled, and avoid pasting unnecessary credentials or account information into the agent.

What this means

Patient health and insurance information could be exposed through chat history, logs, or any persistent memory used by the surrounding agent environment.

Why it was flagged

The workflow may lead users to provide patient identifiers, insurance data, and clinical notes to the agent context. The skill does not show its own storage mechanism, but the data type is sensitive.

Skill content
"Patient demographics (name, Emirates ID, DOB)", "Insurance card details", and "Attach clinical notes; resubmit"
Recommendation

Minimize patient identifiers, redact records where possible, and use approved privacy controls before sharing PHI or insurance documents with the agent.