Security audit

Internal-Medicine-PMPH-10edition

Security checks across malware telemetry and agentic risk

Overview

This is a mostly static medical-textbook skill collection with disclosed clinical and educational content, no executable code, and no evidence of hidden data access or exfiltration.

Install only if you want a static internal-medicine textbook reference skill and can apply clinician or supervised medical judgment. Treat treatment, procedure, dosage, and emergency guidance as educational support, not a substitute for current local protocols or professional care. Be aware the package includes some textbook/education-management modules and has a stale-looking npm install requirement despite containing no executable package files.

SkillSpector

By NVIDIA

Vulnerability Patterns

Data ExfiltrationExternal Transmission, Env Variable Harvesting, File System Enumeration
Excessive AgencyUnrestricted Tool Access, Autonomous Decision Making, Scope Creep
MCP Tool PoisoningHidden Instructions, Unicode Deception, Parameter Description Injection
Prompt InjectionInstruction Override, Hidden Instructions, Exfiltration Commands
Privilege EscalationExcessive Permissions, Sudo/Root Execution, Credential Access

Findings (23)

Description-Behavior Mismatch

Medium

Confidence: 98% confidence
Finding: 总技能描述声明这是面向内科学临床问题的技能集合，聚焦诊断、治疗、检验解读和急症管理等临床场景。但此处条目明确用于大型医学教材/学术出版项目的分级负责编写制度，属于教育出版管理而非临床内科学能力，和技能集宣称用途不一致。

Description-Behavior Mismatch

Medium

Confidence: 98% confidence
Finding: 该条目专门服务于第十轮临床医学教材修订、评审或管理，面向教材建设流程，而不是患者症状、疾病、检验异常或治疗方案等临床问题。它与技能集总描述中的临床决策支持定位存在明显语义偏离。

Description-Behavior Mismatch

Medium

Confidence: 97% confidence
Finding: 该条目用于指导《内科学》教材编写或修订工作，目标用户是教材编写者而非提出临床问题的医生/用户。技能集总描述强调处理内科学临床问题并调用相应临床模块，因此这里构成用途层面的描述—行为不匹配。

Description-Behavior Mismatch

Low

Confidence: 95% confidence
Finding: 该条目用于判断用户是否属于《内科学》第10版教材的目标受众并推荐使用方式，这属于教育资源适配而非临床诊断、治疗或检验解读。与技能集总体宣称的临床问题自动匹配能力不一致。

Description-Behavior Mismatch

Medium

Confidence: 99% confidence
Finding: 该条目用于激活和访问教材配套二维码、课件、视频、AR互动和电子教材等数字资源，明显属于教材资源访问流程，而非临床诊断、风险评估、治疗策略或急症处理。它与技能集总描述中的临床技能定位不匹配。

Context-Inappropriate Capability

Medium

Confidence: 90% confidence
Finding: 总描述强调该技能集由基于《内科学》第10版的核心技能模块组成，并按具体疾病、检验异常、治疗方案等问题路由。这里的条目却声明可整合大量病历数据、医学影像和文献生成结构化诊断建议与风险预测，属于更广泛的通用AI临床决策支持能力，不是一个教材导向技能集所自然需要的能力。

Description-Behavior Mismatch

High

Confidence: 98% confidence
Finding: The manifest context for this skill set says it should provide clinical internal-medicine capabilities such as diagnosis, risk assessment, treatment strategy, test interpretation, and emergency/chronic disease management. This file instead defines an organizational workflow for assigning editors, deputy editors, section leads, and an academic secretary for compiling a medical textbook, which is unrelated to answering clinical questions or routing to disease-focused modules.

Intent-Code Divergence

Medium

Confidence: 95% confidence
Finding: At L03, the manifest states the skill is '不适用于无症状性溃疡或表现不典型的儿童及老年人'. However, L29-L33 instruct the user to consider asymptomatic ulcer presentations and to adjust judgment for older adults and children. This is an active contradiction between the documented scope and the operational guidance.

External Transmission

Medium

Category: Data Exfiltration
Content: <a href="https://www.star-history.com/?repos=Internal-Medicine-PMPH-10edition&type=date&legend=top-left"> <picture> <source media="(prefers-color-scheme: dark)" srcset="https://api.star-history.com/chart?repos=Internal-Medicine-PMPH-10edition&type=date&theme=dark&legend=top-left" /> <source media="(prefers-color-scheme: light)" srcset="https://api.star-history.com/chart?repos=Internal-Medicine-PMPH-10edition&type=date&legend=top-left" /> <img alt="Star History Chart" src="https://api.star-history.com/chart?repos=Internal-Medicine-PMPH-10edition&type=date&legend=top-left" /> </picture>
Confidence: 50% confidence
Finding: https://api.star-history.com/

External Transmission

Medium

Category: Data Exfiltration
Content: <a href="https://www.star-history.com/?repos=Internal-Medicine-PMPH-10edition&type=date&legend=top-left"> <picture> <source media="(prefers-color-scheme: dark)" srcset="https://api.star-history.com/chart?repos=Internal-Medicine-PMPH-10edition&type=date&theme=dark&legend=top-left" /> <source media="(prefers-color-scheme: light)" srcset="https://api.star-history.com/chart?repos=Internal-Medicine-PMPH-10edition&type=date&legend=top-left" /> <img alt="Star History Chart" src="https://api.star-history.com/chart?repos=Internal-Medicine-PMPH-10edition&type=date&legend=top-left" /> </picture> </a>
Confidence: 50% confidence
Finding: https://api.star-history.com/

External Transmission

Medium

Category: Data Exfiltration
Content: <picture> <source media="(prefers-color-scheme: dark)" srcset="https://api.star-history.com/chart?repos=Internal-Medicine-PMPH-10edition&type=date&theme=dark&legend=top-left" /> <source media="(prefers-color-scheme: light)" srcset="https://api.star-history.com/chart?repos=Internal-Medicine-PMPH-10edition&type=date&legend=top-left" /> <img alt="Star History Chart" src="https://api.star-history.com/chart?repos=Internal-Medicine-PMPH-10edition&type=date&legend=top-left" /> </picture> </a>
Confidence: 50% confidence
Finding: https://api.star-history.com/

External Transmission

Medium

Category: Data Exfiltration
Content: <a href="https://www.star-history.com/?repos=Internal-Medicine-PMPH-10edition&type=date&legend=top-left"> <picture> <source media="(prefers-color-scheme: dark)" srcset="https://api.star-history.com/chart?repos=Internal-Medicine-PMPH-10edition&type=date&theme=dark&legend=top-left" /> <source media="(prefers-color-scheme: light)" srcset="https://api.star-history.com/chart?repos=Internal-Medicine-PMPH-10edition&type=date&legend=top-left" /> <img alt="Star History Chart" src="https://api.star-history.com/chart?repos=Internal-Medicine-PMPH-10edition&type=date&legend=top-left" /> </picture>
Confidence: 50% confidence
Finding: https://api.star-history.com/

External Transmission

Medium

Category: Data Exfiltration
Content: <a href="https://www.star-history.com/?repos=Internal-Medicine-PMPH-10edition&type=date&legend=top-left"> <picture> <source media="(prefers-color-scheme: dark)" srcset="https://api.star-history.com/chart?repos=Internal-Medicine-PMPH-10edition&type=date&theme=dark&legend=top-left" /> <source media="(prefers-color-scheme: light)" srcset="https://api.star-history.com/chart?repos=Internal-Medicine-PMPH-10edition&type=date&legend=top-left" /> <img alt="Star History Chart" src="https://api.star-history.com/chart?repos=Internal-Medicine-PMPH-10edition&type=date&legend=top-left" /> </picture> </a>
Confidence: 50% confidence
Finding: https://api.star-history.com/

External Transmission

Medium

Category: Data Exfiltration
Content: <picture> <source media="(prefers-color-scheme: dark)" srcset="https://api.star-history.com/chart?repos=Internal-Medicine-PMPH-10edition&type=date&theme=dark&legend=top-left" /> <source media="(prefers-color-scheme: light)" srcset="https://api.star-history.com/chart?repos=Internal-Medicine-PMPH-10edition&type=date&legend=top-left" /> <img alt="Star History Chart" src="https://api.star-history.com/chart?repos=Internal-Medicine-PMPH-10edition&type=date&legend=top-left" /> </picture> </a>
Confidence: 50% confidence
Finding: https://api.star-history.com/

External Transmission

Medium

Category: Data Exfiltration
Content: <a href="https://www.star-history.com/?repos=Internal-Medicine-PMPH-10edition&type=date&legend=top-left"> <picture> <source media="(prefers-color-scheme: dark)" srcset="https://api.star-history.com/chart?repos=Internal-Medicine-PMPH-10edition&type=date&theme=dark&legend=top-left" /> <source media="(prefers-color-scheme: light)" srcset="https://api.star-history.com/chart?repos=Internal-Medicine-PMPH-10edition&type=date&legend=top-left" /> <img alt="Star History Chart" src="https://api.star-history.com/chart?repos=Internal-Medicine-PMPH-10edition&type=date&legend=top-left" /> </picture>
Confidence: 50% confidence
Finding: https://api.star-history.com/

External Transmission

Medium

Category: Data Exfiltration
Content: <a href="https://www.star-history.com/?repos=Internal-Medicine-PMPH-10edition&type=date&legend=top-left"> <picture> <source media="(prefers-color-scheme: dark)" srcset="https://api.star-history.com/chart?repos=Internal-Medicine-PMPH-10edition&type=date&theme=dark&legend=top-left" /> <source media="(prefers-color-scheme: light)" srcset="https://api.star-history.com/chart?repos=Internal-Medicine-PMPH-10edition&type=date&legend=top-left" /> <img alt="Star History Chart" src="https://api.star-history.com/chart?repos=Internal-Medicine-PMPH-10edition&type=date&legend=top-left" /> </picture> </a>
Confidence: 50% confidence
Finding: https://api.star-history.com/

External Transmission

Medium

Category: Data Exfiltration
Content: <picture> <source media="(prefers-color-scheme: dark)" srcset="https://api.star-history.com/chart?repos=Internal-Medicine-PMPH-10edition&type=date&theme=dark&legend=top-left" /> <source media="(prefers-color-scheme: light)" srcset="https://api.star-history.com/chart?repos=Internal-Medicine-PMPH-10edition&type=date&legend=top-left" /> <img alt="Star History Chart" src="https://api.star-history.com/chart?repos=Internal-Medicine-PMPH-10edition&type=date&legend=top-left" /> </picture> </a>
Confidence: 50% confidence
Finding: https://api.star-history.com/

External Transmission

Medium

Category: Data Exfiltration
Content: <a href="https://www.star-history.com/?repos=Internal-Medicine-PMPH-10edition&type=date&legend=top-left"> <picture> <source media="(prefers-color-scheme: dark)" srcset="https://api.star-history.com/chart?repos=Internal-Medicine-PMPH-10edition&type=date&theme=dark&legend=top-left" /> <source media="(prefers-color-scheme: light)" srcset="https://api.star-history.com/chart?repos=Internal-Medicine-PMPH-10edition&type=date&legend=top-left" /> <img alt="Star History Chart" src="https://api.star-history.com/chart?repos=Internal-Medicine-PMPH-10edition&type=date&legend=top-left" /> </picture>
Confidence: 50% confidence
Finding: https://api.star-history.com/

External Transmission

Medium

Category: Data Exfiltration
Content: <a href="https://www.star-history.com/?repos=Internal-Medicine-PMPH-10edition&type=date&legend=top-left"> <picture> <source media="(prefers-color-scheme: dark)" srcset="https://api.star-history.com/chart?repos=Internal-Medicine-PMPH-10edition&type=date&theme=dark&legend=top-left" /> <source media="(prefers-color-scheme: light)" srcset="https://api.star-history.com/chart?repos=Internal-Medicine-PMPH-10edition&type=date&legend=top-left" /> <img alt="Star History Chart" src="https://api.star-history.com/chart?repos=Internal-Medicine-PMPH-10edition&type=date&legend=top-left" /> </picture> </a>
Confidence: 50% confidence
Finding: https://api.star-history.com/

External Transmission

Medium

Category: Data Exfiltration
Content: <picture> <source media="(prefers-color-scheme: dark)" srcset="https://api.star-history.com/chart?repos=Internal-Medicine-PMPH-10edition&type=date&theme=dark&legend=top-left" /> <source media="(prefers-color-scheme: light)" srcset="https://api.star-history.com/chart?repos=Internal-Medicine-PMPH-10edition&type=date&legend=top-left" /> <img alt="Star History Chart" src="https://api.star-history.com/chart?repos=Internal-Medicine-PMPH-10edition&type=date&legend=top-left" /> </picture> </a>
Confidence: 50% confidence
Finding: https://api.star-history.com/

External Transmission

Medium

Category: Data Exfiltration
Content: <a href="https://www.star-history.com/?repos=Internal-Medicine-PMPH-10edition&type=date&legend=top-left"> <picture> <source media="(prefers-color-scheme: dark)" srcset="https://api.star-history.com/chart?repos=Internal-Medicine-PMPH-10edition&type=date&theme=dark&legend=top-left" /> <source media="(prefers-color-scheme: light)" srcset="https://api.star-history.com/chart?repos=Internal-Medicine-PMPH-10edition&type=date&legend=top-left" /> <img alt="Star History Chart" src="https://api.star-history.com/chart?repos=Internal-Medicine-PMPH-10edition&type=date&legend=top-left" /> </picture>
Confidence: 50% confidence
Finding: https://api.star-history.com/

External Transmission

Medium

Category: Data Exfiltration
Content: <a href="https://www.star-history.com/?repos=Internal-Medicine-PMPH-10edition&type=date&legend=top-left"> <picture> <source media="(prefers-color-scheme: dark)" srcset="https://api.star-history.com/chart?repos=Internal-Medicine-PMPH-10edition&type=date&theme=dark&legend=top-left" /> <source media="(prefers-color-scheme: light)" srcset="https://api.star-history.com/chart?repos=Internal-Medicine-PMPH-10edition&type=date&legend=top-left" /> <img alt="Star History Chart" src="https://api.star-history.com/chart?repos=Internal-Medicine-PMPH-10edition&type=date&legend=top-left" /> </picture> </a>
Confidence: 50% confidence
Finding: https://api.star-history.com/

External Transmission

Medium

Category: Data Exfiltration
Content: <picture> <source media="(prefers-color-scheme: dark)" srcset="https://api.star-history.com/chart?repos=Internal-Medicine-PMPH-10edition&type=date&theme=dark&legend=top-left" /> <source media="(prefers-color-scheme: light)" srcset="https://api.star-history.com/chart?repos=Internal-Medicine-PMPH-10edition&type=date&legend=top-left" /> <img alt="Star History Chart" src="https://api.star-history.com/chart?repos=Internal-Medicine-PMPH-10edition&type=date&legend=top-left" /> </picture> </a>
Confidence: 50% confidence
Finding: https://api.star-history.com/

VirusTotal

58/58 vendors flagged this skill as clean.

View on VirusTotal

Static analysis

No suspicious patterns detected.