YouYou 佑佑

WarnAudited by ClawScan on May 10, 2026.

Overview

The skill is mostly aligned with local health record management, but it contradicts its own safety boundary by including pediatric medication dose guidance.

Install only if you are comfortable storing sensitive health records locally. Keep the data/ folder private and out of synced or shared repositories. Do not rely on the skill for medication dosing or medical decisions; verify any medication, child health, or urgent-care advice with a qualified clinician.

Findings (2)

Artifact-based informational review of SKILL.md, metadata, install specs, static scan signals, and capability signals. ClawScan does not execute the skill or run runtime probes.

What this means

A user may rely on the assistant for child medication dosing even though dosing errors can cause real medical harm.

Why it was flagged

This gives pediatric medication dose ranges. That conflicts with the top-level SKILL.md safety boundary stating the skill does not provide medication dosage advice, creating a misleading trust and safety mismatch.

Skill content
布洛芬(>6月龄):5-10mg/kg,间隔6-8小时 ... 对乙酰氨基酚(>3月龄):10-15mg/kg,间隔4-6小时
Recommendation

Remove concrete pediatric dosing instructions or replace them with a clear prompt to follow the medicine label and consult a clinician/pharmacist, especially for children.

What this means

Health records, images, medication history, and family/child health data may remain on disk and could be exposed if the folder is synced, shared, backed up insecurely, or committed to a repository.

Why it was flagged

The skill intentionally persists a broad set of sensitive personal medical records locally. This is aligned with the stated purpose, but the data is highly private and the path is a generic local directory.

Skill content
所有数据存储在 `data/` 目录:... profile.json ... allergies.json ... medications/ ... 生化检查 ... 影像检查 ... 手术记录 ... 出院小结
Recommendation

Store the data folder in a private, non-synced location; avoid using it inside project repositories; back it up securely; and review any generated reports before sharing.