ClawHub
Back to skill

Security audit

medication-commander

Security checks across malware telemetry and agentic risk

Overview

The skill is a coherent medication organizer that reads user-provided medication files and stores adherence history locally, with no evidence of hidden network, credential, or destructive behavior.

Before installing, understand that using the adherence feature creates a local health-related history file at ~/.medication_commander_adherence.json. Avoid using it on shared machines unless local account protections are appropriate, and delete that file if you no longer want the adherence history retained. Treat the interaction database as informational only and verify medication decisions with a clinician or pharmacist.

SkillSpector

By NVIDIA
Vulnerability Patterns
  • MCP Least PrivilegeUnderdeclared Capability, Wildcard Permission, Missing Permission Declaration
  • Prompt InjectionInstruction Override, Hidden Instructions, Exfiltration Commands
  • Data ExfiltrationExternal Transmission, Env Variable Harvesting, File System Enumeration
  • Privilege EscalationExcessive Permissions, Sudo/Root Execution, Credential Access
  • Supply ChainUnpinned Dependencies, External Script Fetching, Obfuscated Code
Findings (4)

Lp3

Medium
Category
MCP Least Privilege
Confidence
91% confidence
Finding
The skill documentation describes file read/write behavior, including reading medication JSON files and writing adherence data to `~/.medication_commander_adherence.json`, but no permissions are declared. This creates a trust and containment gap: an agent or reviewer may assume the skill is non-persistent or less privileged than it actually is, increasing the chance of unintended local file access or silent storage of sensitive health data.

Missing User Warnings

Medium
Confidence
89% confidence
Finding
The documentation explicitly states that adherence data is stored in a persistent file under the user's home directory, which creates a local record of sensitive health information. In a medication-management skill, this is privacy-relevant data and the lack of any warning, access-control guidance, retention policy, or opt-out makes accidental disclosure more likely on shared systems, in backups, or through other local compromise.

Missing User Warnings

Medium
Confidence
95% confidence
Finding
The script persists adherence history containing medication names, scheduled times, and taken/missed status to a file in the user's home directory. In a medication-management context, this is sensitive health information, and storing it locally without explicit disclosure, consent, or access-control hardening can expose private medical data to other local users, backups, or shared environments.

Missing User Warnings

Medium
Confidence
97% confidence
Finding
At the point where adherence data is written, the program silently updates a persistent JSON file without any user-facing warning or confirmation. Because the data reflects medication usage behavior, the lack of visible notice is especially risky in this skill's healthcare context, where users may reasonably not expect their adherence history to be retained on disk.

VirusTotal

63/63 vendors flagged this skill as clean.

View on VirusTotal

Static analysis

No suspicious patterns detected.