Skill flagged — suspicious patterns detected
ClawHub Security flagged this skill as suspicious. Review the scan results before using.
Bytesagain Medical Scribe
v1.0.0Generate medical documents from clinical notes. Input: patient info, symptoms, diagnosis. Output: SOAP notes, discharge summaries, referral letters, prescrip...
⭐ 0· 26·0 current·0 all-time
MIT-0
Download zip
LicenseMIT-0 · Free to use, modify, and redistribute. No attribution required.
Security Scan
OpenClaw
Benign
high confidencePurpose & Capability
Name/description (medical scribe producing SOAP notes, discharge summaries, referrals, prescriptions) matches the provided implementation: a local Bash script that fills templates from command-line inputs and prints structured text.
Instruction Scope
Runtime instructions simply invoke scripts/script.sh with CLI arguments; the script only processes those arguments and emits template text. Note: SKILL.md and the disclaimers refer to 'AI-generated drafts' and 'Powered by BytesAgain', but the included script contains no AI calls, no network requests, and performs only local templating—this is a minor mismatch between marketing and implementation.
Install Mechanism
No install spec; skill is instruction-only plus a bash script. No downloads, package installs, or extract steps are present.
Credentials
The skill requires no environment variables, credentials, or config paths. It does create a data directory under the user's home but does not read other config, secrets, or unrelated system files.
Persistence & Privilege
The script creates ~/.local/share/bytesagain-medical-scribe (mkdir -p) for its data. This is limited local persistence and not an elevated privilege, but users should be aware the directory will exist and could hold future data if the script is extended.
Assessment
This skill appears coherent and runs entirely locally: it fills medical-document templates from command-line inputs and prints them. Before installing/using: 1) Review the script (already included) to confirm there are no network calls—currently there are none. 2) Do not run with real patient-identifiable data (PHI) until you are satisfied with privacy controls; the script stores a directory under your home which could be used later to save data. 3) Note the SKILL.md mentions 'AI-generated' drafts and external URLs (bytesagain.com), but the shipped code is a local template generator—treat marketing claims accordingly. 4) If you expect an AI-backed service (e.g., remote model calls), request clarification from the author/source before sending sensitive data. 5) If you proceed, test with dummy data and inspect ~/.local/share/bytesagain-medical-scribe for any files.Like a lobster shell, security has layers — review code before you run it.
latestvk9765qmx9ezzmhd9wqhqj5atzn849y5x
License
MIT-0
Free to use, modify, and redistribute. No attribution required.