ClawHub
Back to skill

Security audit

Chiropractic Practice Marketing Kit

Security checks for vulnerabilities and agentic risk

Overview

This is a prompt-only chiropractic marketing kit with healthcare compliance cautions, but it does not install code, access data, or send messages itself.

Install only if you understand this is a marketing prompt kit, not legal advice or a compliance validator. Before using generated outreach, verify Nevada and federal advertising claims, use only documented opt-in recipient lists, honor opt-outs and unsubscribe requests, avoid PHI unless properly authorized, and replace or verify all example provider, license, credential, address, and contact details.

SkillSpector

Vulnerability Patterns
  • Data ExfiltrationExternal Transmission, Env Variable Harvesting, File System Enumeration
  • Prompt InjectionInstruction Override, Hidden Instructions, Exfiltration Commands
  • Privilege EscalationExcessive Permissions, Sudo/Root Execution, Credential Access
  • Supply ChainUnpinned Dependencies, External Script Fetching, Obfuscated Code
  • Excessive AgencyUnrestricted Tool Access, Autonomous Decision Making, Scope Creep
Findings (1)

Missing User Warnings

Low
Confidence
88% confidence
Finding
The README promotes SMS and email outreach campaigns for a healthcare marketing skill while only briefly mentioning a TCPA opt-out, and it does not clearly require prior express consent, suppression-list handling, or privacy safeguards for recipient data. In a healthcare context, outreach workflows can involve sensitive patient relationships and regulated communications, so missing compliance and privacy guardrails can lead users to generate or send campaigns that violate consent, privacy, or anti-spam requirements.

Static analysis

No suspicious patterns detected.