Security audit

Family Medical History / 家庭医疗档案

Security checks for vulnerabilities and agentic risk

Overview

This is a coherent local family medical-records skill, but it handles and persists highly sensitive health and identity data without clear consent, access-control, or retention safeguards.

Install only if you intentionally want a local plaintext family medical-records database. Store it in a protected location, avoid syncing the database or Markdown exports to shared/cloud folders, review every proposed insert or update before allowing it, and plan how you will back up, delete, or encrypt the records.

SkillSpector

Vulnerability Patterns

Data ExfiltrationExternal Transmission, Env Variable Harvesting, File System Enumeration
Trigger AbuseOverly Broad Trigger, Shadow Command Trigger, Keyword Baiting Trigger
Prompt InjectionInstruction Override, Hidden Instructions, Exfiltration Commands
Privilege EscalationExcessive Permissions, Sudo/Root Execution, Credential Access
Supply ChainUnpinned Dependencies, External Script Fetching, Obfuscated Code

Findings (4)

Missing User Warnings

Medium

Confidence: 92% confidence
Finding: This skill is designed to collect and directly modify highly sensitive medical records in SQLite, but it provides no explicit privacy, consent, retention, or confirmation safeguards before storing or changing data. In an agent setting, that creates a real risk of unauthorized collection, accidental persistence of health data, or silent corruption of records, especially because the database is presented as the mandatory single source of truth.

Vague Triggers

Medium

Confidence: 83% confidence
Finding: The trigger list includes broad everyday phrases such as "allergy," "vaccination," and "medical record," which can match normal conversation and cause the skill to activate in contexts the user did not intend. Because this skill handles sensitive health data and performs database writes, overly broad activation materially increases the chance of unintended collection, disclosure, or modification of medical information.

Missing User Warnings

Medium

Confidence: 95% confidence
Finding: The CLI exposes sensitive medical information, including member identities, visits, diagnoses, and medications, directly to stdout without any authentication, authorization, masking, or privacy warning. In the context of family medical records, this materially increases the risk of unauthorized disclosure through local use, shell history, terminal logging, screenshots, or captured command output.

Missing User Warnings

Medium

Confidence: 95% confidence
Finding: This script exports highly sensitive medical and identity data from SQLite into plaintext Markdown files on disk, including names, DOB, ID numbers, insurance numbers, diagnoses, medications, and emergency contacts. Writing PHI/PII into broadly accessible filesystem content without access controls, encryption, minimization, or retention safeguards materially increases the risk of unauthorized disclosure, accidental syncing, backup leakage, or exfiltration.

Static analysis

No suspicious patterns detected.