Security audit
China Top Doctor Referral
Security checks across malware telemetry and agentic risk
Overview
The skill is mostly aligned with doctor referral, but its P2P doctor search accepts unverified responses and it stores OceanBus credentials locally, so users should review it before use.
Install only if you are comfortable using the OceanBus npm dependency, storing an OceanBus credential under ~/.oceanbus-referral, and sending referral/support details through OceanBus. Before using it for real appointments, the publisher should add sender verification for DoctorDataSvc responses and clearly disclose what customer profile or conversation data is shared during human handoff.
VirusTotal
60/60 vendors flagged this skill as clean.
Static analysis
No suspicious patterns detected.