Gov Public Health

PassAudited by ClawScan on May 1, 2026.

Overview

This skill is a coherent public-health data connector, but users should notice that it adds a remote MCP server and sends tool queries to that external endpoint.

This appears appropriate for accessing CDC and WHO public-health data. Before installing, make sure you are comfortable adding the listed remote MCP server and avoid sending personal or confidential health information through its queries.

Findings (2)

Artifact-based informational review of SKILL.md, metadata, install specs, static scan signals, and capability signals. ClawScan does not execute the skill or run runtime probes.

Low

#ASI04: Agentic Supply Chain Vulnerabilities

What this means

If installed, the agent can call a remote MCP provider for public-health data queries.

Why it was flagged

The skill tells the user to register a remote MCP server. This is consistent with the skill's purpose, but the runnable service is external to the artifact being reviewed.

Skill content

mcporter add gov-health --url https://public-health-mcp.apify.actor/mcp --transport streamable-http

Recommendation

Install only if you trust the remote MCP endpoint and remove the MCP config entry when you no longer want the tool available.

Low

#ASI07: Insecure Inter-Agent Communication

What this means

Public-health query terms and parameters may be visible to the remote MCP service.

Why it was flagged

Tool calls are routed over HTTP to an external MCP service, so query text and parameters are sent outside the local agent environment.

Skill content

"url": "https://public-health-mcp.apify.actor/mcp", "transport": "streamable-http"

Recommendation

Use it for non-sensitive public-health research queries and avoid placing private health information or confidential data in tool requests.