unisound-surgery-sufficiency-review

• Analyzed: May 15, 2026, 8:46 AM
• Findings: 1
• Version: 1.0.0
• Hash: ef60341f985940ee95fd6d0434016ec51279b812f676553157785b543d9469fd
• Source: palm
• External report: View on VirusTotal

Findings (1)

The skill bundle is designed for medical surgery sufficiency reviews but contains hardcoded internal infrastructure details, including a PostgreSQL database host (10.10.20.15) and a specific LLM API endpoint (maas-api.hivoice.cn) in scripts/surgery_sufficiency_review.py. While these appear to be functional requirements for an internal tool, hardcoding internal network addresses and database schemas is a security vulnerability that could facilitate unauthorized internal network access or lateral movement. The script processes sensitive medical records and transmits them to the hardcoded API endpoint, which, although requiring a user-provided appkey, represents a high-risk data flow.