Back to skill
Skillv1.0.0
ClawScan security
Bytesagain Medical Scribe · ClawHub's context-aware review of the artifact, metadata, and declared behavior.
Scanner verdict
BenignApr 5, 2026, 11:58 PM
- Verdict
- benign
- Confidence
- high
- Model
- gpt-5-mini
- Summary
- The skill is internally consistent with its stated purpose (generating medical document templates); it is a local, instruction-driven script with no network calls or secret requirements, though it creates a local data directory and the SKILL text mentions 'AI-generated' drafts while the script is a simple templating tool.
- Guidance
- This skill appears coherent and runs entirely locally: it fills medical-document templates from command-line inputs and prints them. Before installing/using: 1) Review the script (already included) to confirm there are no network calls—currently there are none. 2) Do not run with real patient-identifiable data (PHI) until you are satisfied with privacy controls; the script stores a directory under your home which could be used later to save data. 3) Note the SKILL.md mentions 'AI-generated' drafts and external URLs (bytesagain.com), but the shipped code is a local template generator—treat marketing claims accordingly. 4) If you expect an AI-backed service (e.g., remote model calls), request clarification from the author/source before sending sensitive data. 5) If you proceed, test with dummy data and inspect ~/.local/share/bytesagain-medical-scribe for any files.
Review Dimensions
- Purpose & Capability
- okName/description (medical scribe producing SOAP notes, discharge summaries, referrals, prescriptions) matches the provided implementation: a local Bash script that fills templates from command-line inputs and prints structured text.
- Instruction Scope
- noteRuntime instructions simply invoke scripts/script.sh with CLI arguments; the script only processes those arguments and emits template text. Note: SKILL.md and the disclaimers refer to 'AI-generated drafts' and 'Powered by BytesAgain', but the included script contains no AI calls, no network requests, and performs only local templating—this is a minor mismatch between marketing and implementation.
- Install Mechanism
- okNo install spec; skill is instruction-only plus a bash script. No downloads, package installs, or extract steps are present.
- Credentials
- okThe skill requires no environment variables, credentials, or config paths. It does create a data directory under the user's home but does not read other config, secrets, or unrelated system files.
- Persistence & Privilege
- noteThe script creates ~/.local/share/bytesagain-medical-scribe (mkdir -p) for its data. This is limited local persistence and not an elevated privilege, but users should be aware the directory will exist and could hold future data if the script is extended.