unisound-diagnosis-review

• Analyzed: May 15, 2026, 9:06 AM
• Findings: 1
• Version: 1.0.0
• Hash: abd19b63145a20221381953eb0bc3899e7501292ba4ee16e636bc08070cee16e
• Source: palm
• External report: View on VirusTotal

Findings (1)

The skill bundle contains hardcoded internal infrastructure details, including a private IP address (10.10.20.15) and database credentials (user 'audituser') within 'scripts/diagnosis_review.py'. While the 'SKILL.md' documentation acknowledges this and the code's behavior aligns with its stated purpose of medical diagnosis auditing, hardcoding such sensitive configuration is a significant security vulnerability. Furthermore, the script exfiltrates medical record data to an external LLM API (maas-api.hivoice.cn), which, although intended, poses a privacy risk.