ClawHub
Back to skill

Security audit

Medical Dental Appointment Pilot

Security checks for vulnerabilities and agentic risk

Overview

The skill is mostly coherent for clinic scheduling, but it handles sensitive patient appointment data with vague safeguards and includes an unrelated sales link in the operational instructions.

Review this carefully before installing in any real clinic workflow. Require explicit privacy disclosures, approved secure storage, retention rules, audit controls, and scoped access to scheduling or insurance systems; remove the Gumroad upsell/link from runtime instructions before patient-facing use.

A.I.G

Vulnerability Patterns
  • Skill Instruction HijackingAlters the agent's session goals or safety constraints when the skill loads
  • Agent Memory PoisoningWrites attacker-controlled rules into memory that affect later sessions
  • Remote Payload Retrieval and ExecutionFetches external code whose behavior can change after review
  • Embedded Malicious CodeShips malicious scripts inside the skill and executes them locally
  • Unauthorized Access and Privilege EscalationObtains permissions beyond the task's legitimate needs

SkillSpector

Vulnerability Patterns
  • Excessive AgencyUnrestricted Tool Access, Autonomous Decision Making, Scope Creep
  • MCP Tool PoisoningHidden Instructions, Unicode Deception, Parameter Description Injection
  • Prompt InjectionInstruction Override, Hidden Instructions, Exfiltration Commands
  • Data ExfiltrationExternal Transmission, Env Variable Harvesting, File System Enumeration
  • Privilege EscalationExcessive Permissions, Sudo/Root Execution, Credential Access
Findings (3)

Missing User Warnings

Medium
Category
Not specified by scanner
Confidence
95% confidence
Finding

The skill explicitly instructs collection of patient name, visit reason, insurance provider, and preferred practitioner, which can constitute protected or sensitive health-related information, yet it provides no user-facing notice, consent flow, minimum-necessary guidance, or clear handling constraints at the point of collection. This is especially dangerous because the skill markets itself as HIPAA-aware, which may cause operators to overtrust it despite incomplete privacy safeguards and ambiguous logging practices.

Content

No source excerpt is available for this finding.

Description-Behavior Mismatch

Low
Category
Not specified by scanner
Confidence
93% confidence
Finding

The embedded premium upsell is unrelated to the operational purpose of a HIPAA-aware clinic appointment agent and introduces unnecessary external commercial content into a high-trust healthcare workflow. In a medical context, this can erode user trust, create opportunities for off-platform redirection, and normalize behavior that is inappropriate for handling sensitive patient interactions.

Content

No source excerpt is available for this finding.

Context-Inappropriate Capability

Low
Category
Not specified by scanner
Confidence
95% confidence
Finding

The external Gumroad sales link is not justified by the stated appointment-booking purpose and creates an unnecessary outbound path from a healthcare-oriented skill. In a HIPAA-sensitive context, unexpected external links increase phishing, tracking, and data-sharing risk, especially if users or operators are encouraged to follow them during clinical workflow setup or use.

Content

No source excerpt is available for this finding.

Static analysis

No suspicious patterns detected.