Security audit
DRG/DIP 工具包（MedGroup）
Security checks for vulnerabilities and agentic risk
Overview
This skill is a disclosed MedGroup MCP helper for DRG/DIP coding and settlement checks, with appropriate cautions around credentials and patient data.
Install only if you intend to use MedGroup for DRG/DIP assistance. Configure the MedGroup key only in local MCP settings, avoid entering patient identifiers, and treat settlement outputs as scenario estimates rather than official payment determinations.
Vulnerability Patterns
- Prompt InjectionInstruction Override, Hidden Instructions, Exfiltration Commands
- Data ExfiltrationExternal Transmission, Env Variable Harvesting, File System Enumeration
- Privilege EscalationExcessive Permissions, Sudo/Root Execution, Credential Access
- Supply ChainUnpinned Dependencies, External Script Fetching, Obfuscated Code
- Excessive AgencyUnrestricted Tool Access, Autonomous Decision Making, Scope Creep
Static analysis
No suspicious patterns detected.