ClawHub
Back to skill

Security audit

hospital-discharge-planner

Security checks for vulnerabilities and agentic risk

Overview

This offline discharge-planning skill is coherent and purpose-aligned, but users should treat generated handoff cards as sensitive health information.

Use this skill as an offline planning aid, not as medical advice. If you generate a handoff card, avoid entering details you would not want visible in terminal scrollback, shared consoles, screenshots, or logs, and verify Medicare and clinical details with the hospital team or insurer.

A.I.G

Vulnerability Patterns
  • Skill Instruction HijackingAlters the agent's session goals or safety constraints when the skill loads
  • Agent Memory PoisoningWrites attacker-controlled rules into memory that affect later sessions
  • Remote Payload Retrieval and ExecutionFetches external code whose behavior can change after review
  • Embedded Malicious CodeShips malicious scripts inside the skill and executes them locally
  • Unauthorized Access and Privilege EscalationObtains permissions beyond the task's legitimate needs

SkillSpector

Vulnerability Patterns
  • Prompt InjectionInstruction Override, Hidden Instructions, Exfiltration Commands
  • Data ExfiltrationExternal Transmission, Env Variable Harvesting, File System Enumeration
  • Privilege EscalationExcessive Permissions, Sudo/Root Execution, Credential Access
  • Supply ChainUnpinned Dependencies, External Script Fetching, Obfuscated Code
  • Excessive AgencyUnrestricted Tool Access, Autonomous Decision Making, Scope Creep
Findings (1)

Missing User Warnings

Medium
Category
Not specified by scanner
Confidence
86% confidence
Finding

The handoff command prints patient and contact details, along with spaces for conditions, allergies, pharmacy, insurance ID, and code status, directly to standard output without any privacy warning, masking, or output-destination control. In a CLI context this can expose protected health information through terminal scrollback, shell history workflows, logs, screenshots, shared consoles, or redirected files, especially in hospital or caregiver environments.

Content

No source excerpt is available for this finding.