Insurance Claims Intelligence

AdvisoryAudited by Static analysis on May 11, 2026.

Overview

No suspicious patterns detected.

Findings (0)

Artifact-based informational review of SKILL.md, metadata, install specs, static scan signals, and capability signals. ClawScan does not execute the skill or run runtime probes.

What this means

If you run the integration examples, your OCR or LLM account credentials may be used and could incur cost or expose account access if mishandled.

Why it was flagged

The skill expects user-supplied service credentials for optional OCR/LLM examples. This is expected for the stated purpose, but the user must control key scope and storage.

Skill content
Requires API credentials: YES — you must provide your own OCR/LLM API keys
Recommendation

Use least-privilege provider keys, store them in environment variables or a secret manager, and revoke unused keys.

What this means

Medical invoice images and claimant details could be transmitted to a third-party OCR provider if the example is implemented.

Why it was flagged

The OCR example sends selected invoice images to a disclosed cloud OCR provider. Medical invoices are sensitive, but the document also instructs users to obtain consent, redact PII, and check retention terms.

Skill content
with open(image_path, "rb") as f: ... img_b64 = base64.b64encode(f.read()) ... url = "https://aip.baidu.com/rest/2.0/ocr/v1/medical_invoice" ... resp = requests.post(url, data=payload, headers=headers)
Recommendation

Only upload user-approved documents, redact unnecessary personal information, verify provider retention/cross-border terms, and prefer private/on-prem OCR for production.

What this means

A user could mistakenly send a draft as an official approval, denial, payout, or fraud-related notice.

Why it was flagged

Some report templates use formal claim-status and payment language that could look like a final decision if copied directly, even though the broader artifacts require licensed human review.

Skill content
**处理状态**: {{AUTO_PASS | MANUAL_REVIEW | HIGH_RISK | REJECT}} ... 本次理赔已通过智能审核,赔款将于3个工作日内转入您指定的银行账户。
Recommendation

Keep all generated reports clearly labeled as drafts until a licensed claims professional reviews and approves them; consider replacing auto-pass wording with draft recommendation wording.