Generate Med Spa Studio Client Education Handout

AdvisoryAudited by Static analysis on May 1, 2026.

Overview

No suspicious patterns detected.

Findings (0)

Artifact-based informational review of SKILL.md, metadata, install specs, static scan signals, and capability signals. ClawScan does not execute the skill or run runtime probes.

What this means

If invoked, the agent may have permission to run local commands or read files unrelated to the requested handout.

Why it was flagged

This grants broad local shell and file-read capabilities for a skill whose stated workflow is drafting a med-spa education handout; the artifacts do not define command limits, file scopes, or approval requirements.

Skill content
allowed-tools: Bash, Read
Recommendation

Remove Bash unless it is truly required, and restrict Read usage to explicit user-provided files or templates with clear confirmation.

What this means

Following the external manual install path could fetch files outside this review.

Why it was flagged

The reviewed package is instruction-only, but the manual install instructions point to an external repository that was not included in the supplied artifacts.

Skill content
git clone https://github.com/qiaomucom/generate-med-spa-studio-client-education-handout.git
Recommendation

Install from the trusted registry when possible, verify the repository owner and contents, and review any fetched files before use.

What this means

Generated handouts could contain inaccurate or noncompliant medical/marketing claims if sent without review.

Why it was flagged

The skill may produce patient-facing health or aesthetics content, and the artifact appropriately warns that medical or regulated claims require review.

Skill content
Use human review before sending patient-facing content or relying on regulated medical claims.
Recommendation

Have a qualified human review medical claims, treatment descriptions, disclaimers, and local advertising compliance before distribution.