other
Warning
- Location
SKILL.md:22- Finding
Predetermined Medical Guidance Exceeds the Skill's Declared Safety Boundaries
- Content
View full analysis
Vulnerability Details
File Location:
SKILL.md, lines 22-24; duplicated inREADME.md, lines 20-23
Vulnerability Type:other: Unsafe medical guidance
Risk Level: MediumComplete Relevant Snippet from
SKILL.md(English translation):markdown ### Scenario 4: Unable to understand a medical examination report **User input:** "This year's company medical examination report says I have a 'TI-RADS category 3 thyroid nodule' and 'elevated low-density lipoprotein.' Is this serious?" **Expected output:** Interpret the examination indicators: TI-RADS category 3 means that the thyroid nodule has a relatively low malignancy risk (probability of being benign greater than 95%). Recommend follow-up imaging in 6-12 months to observe size changes. Elevated low-density lipoprotein (LDL-C greater than 3.4 mmol/L) indicates a need for lifestyle intervention: reduce red meat and fried foods, increase vegetable and fiber intake, and perform at least 150 minutes of aerobic exercise per week. Recommend further consultation with the endocrinology department of a tertiary hospital. If this is the first occurrence, repeat the four-item blood lipid panel after three months. Also state that this interpretation cannot replace a doctor's diagnosis.Duplicated Relevant Snippet from
README.md(English translation):markdown **3. Unable to understand a medical examination report** > User: "This year's company medical examination report says I have a > 'TI-RADS category 3 thyroid nodule' and 'elevated low-density lipoprotein.' > Is this serious?" > Agent: Explain that TI-RADS category 3 has a relatively low malignancy risk > (probability of being benign greater than 95%) and recommend follow-up in > 6-12 months. For elevated low-density lipoprotein, recommend lifestyle > intervention: reduce red meat and fried foods, increase vegetable fiber, > and perform at least 150 minutes of aerobic exer ...[truncated 2641 chars]- Remediation
View remediation
Remediation Suggestions
- Remove predetermined malignancy probabilities, repeat-testing intervals, referral destinations, and intervention schedules from example outputs.
- Replace the scenario with a neutral workflow that asks for the complete report, reference ranges, symptoms, relevant history, current medications, and whether a clinician has already reviewed the findings.
- Present only general educational information and clearly identify uncertainty and contextual limitations.
- Require qualified clinicians to determine individualized follow-up timing, testing, diagnosis, and treatment.
- Add explicit escalation guidance for urgent warning signs while avoiding claims that a limited report is benign or non-urgent.
- Add a safety rule prohibiting the Agent from converting example scenarios into fixed patient-specific recommendations.
- Make the same changes in both
SKILL.mdandREADME.mdso public documentation does not reintroduce the unsafe behavior. - Add test cases verifying that incomplete medical data produces clarification questions and professional-referral guidance rather than predetermined conclusions.