Pathology-PMPH-10edition

• Outcome: Review
• Latest audit: Sep 16, 2026 · 9:21 AM UTC
• Version: 1.0.0

Overview

This is a text-only pathology reference skill, but it needs Review because it gives actionable medical diagnosis and treatment guidance with inconsistent safety boundaries and at least one apparent high-impact diagnostic typo.

Use this only as educational or clinician-reviewed pathology reference material. Do not rely on it for self-diagnosis, emergency symptoms, chemotherapy, surgery, radiotherapy, medication, or other treatment decisions; verify any clinical output against current guidelines, local protocols, and a qualified clinician or pathologist before acting.

A.I.G

Vulnerability Patterns

• Skill Instruction Hijacking: Alters the agent's session goals or safety constraints when the skill loads
• Agent Memory Poisoning: Writes attacker-controlled rules into memory that affect later sessions
• Remote Payload Retrieval and Execution: Fetches external code whose behavior can change after review
• Embedded Malicious Code: Ships malicious scripts inside the skill and executes them locally
• Unauthorized Access and Privilege Escalation: Obtains permissions beyond the task's legitimate needs

SkillSpector

Vulnerability Patterns

• Data Exfiltration: External Transmission, Env Variable Harvesting, File System Enumeration
• MCP Tool Poisoning: Hidden Instructions, Unicode Deception, Parameter Description Injection
• Prompt Injection: Instruction Override, Hidden Instructions, Exfiltration Commands
• Privilege Escalation: Excessive Permissions, Sudo/Root Execution, Credential Access
• Supply Chain: Unpinned Dependencies, External Script Fetching, Obfuscated Code

Findings (167)

Missing User Warnings

High

• Category: Not specified by scanner
• Confidence: 98% confidence

Finding

This skill provides structured diagnostic logic for coronary heart disease, including acute coronary syndrome categories, but does not clearly instruct users with chest pain or other red-flag symptoms to seek urgent/emergency medical care. In a high-risk domain where delayed treatment can cause myocardial infarction, arrhythmia, or death, omission of an explicit emergency escalation warning can lead users to rely on the skill instead of seeking time-critical care.

Content

No source excerpt is available for this finding.

Intent-Code Divergence

High

• Category: Not specified by scanner
• Confidence: 99% confidence

Finding

This section operationalizes the likely incorrect fusion target in the core molecular confirmation step, making the error actionable rather than merely descriptive. Because this is the decisive diagnostic step, users could order, interpret, or trust the wrong assay result, directly affecting diagnosis and chemotherapy decisions.

Content

No source excerpt is available for this finding.

Intent-Code Divergence

High

• Category: Not specified by scanner
• Confidence: 99% confidence

Finding

The final decision rule ties definitive diagnosis and initiation of chemotherapy to the same likely incorrect fusion criterion. In medical context, embedding an incorrect molecular requirement into the final output can cause harmful overtreatment, undertreatment, or treatment delay.

Content

No source excerpt is available for this finding.

Missing User Warnings

High

• Category: Not specified by scanner
• Confidence: 97% confidence

Finding

This skill provides bleeding classification and urgency assessment, including thresholds for shock risk and identification of critical organ bleeding, but it does not clearly warn that it is not a substitute for professional medical care or instruct users with emergency bleeding symptoms to seek immediate emergency services. In a real-world setting, users may delay urgent care by relying on the skill's risk framing, which is especially dangerous for hemorrhage where deterioration can be rapid and life-threatening.

Content

No source excerpt is available for this finding.

Missing User Warnings

High

• Category: Not specified by scanner
• Confidence: 97% confidence

Finding

This collection supports diagnosis, staging, prognosis, and therapy-related judgments but provides no visible medical safety disclaimer, professional-use limitation, or emergency redirection. That omission is dangerous because non-expert users may rely on authoritative-sounding outputs for real clinical decisions, creating material patient-safety risk.

Content

No source excerpt is available for this finding.

Missing User Warnings

High

• Category: Not specified by scanner
• Confidence: 93% confidence

Finding

The skill gives concrete treatment-sequencing advice such as prioritizing chemotherapy versus surgery/radiotherapy based on growth fraction, but it does not clearly warn that this is educational content and not a substitute for oncology or pathology clinician judgment. In a medical context, users may over-rely on the guidance for real patient decisions, creating risk of inappropriate treatment planning, delay of standard care, or harm from oversimplified recommendations.

Content

No source excerpt is available for this finding.

Ae4

Medium

• Category: analysis-evasion
• Confidence: 80% confidence

Finding

Suspicious Unicode normalization or mixed-script content

Content

No source excerpt is available for this finding.

External Transmission

Medium

• Category: Data Exfiltration
• Confidence: 50% confidence

Finding

Data is being sent to an external URL. This could be legitimate telemetry or data exfiltration. Manual review is recommended.

Content

Scanner excerpt · README.md (reported line 264)May include surrounding context.

md

<a href="https://www.star-history.com/?repos=xllgreen%2FPathology-PMPH-10edition&type=date&legend=top-left">
 <picture>
   <source media="(prefers-color-scheme: dark)" srcset="https://api.star-history.com/chart?repos=xllgreen/Pathology-PMPH-10edition&type=date&theme=dark&legend=top-left" />
   <source media="(prefers-color-scheme: light)" srcset="https://api.star-history.com/chart?repos=xllgreen/Pathology-PMPH-10edition&type=date&legend=top-left" />
   <img alt="Star History Chart" src="https://api.star-history.com/chart?repos=xllgreen/Pathology-PMPH-10edition&type=date&legend=top-left" />
 </picture>

External Transmission

Medium

• Category: Data Exfiltration
• Confidence: 50% confidence

Finding

Data is being sent to an external URL. This could be legitimate telemetry or data exfiltration. Manual review is recommended.

Content

Scanner excerpt · README.md (reported line 265)May include surrounding context.

md

<a href="https://www.star-history.com/?repos=xllgreen%2FPathology-PMPH-10edition&type=date&legend=top-left">
 <picture>
   <source media="(prefers-color-scheme: dark)" srcset="https://api.star-history.com/chart?repos=xllgreen/Pathology-PMPH-10edition&type=date&theme=dark&legend=top-left" />
   <source media="(prefers-color-scheme: light)" srcset="https://api.star-history.com/chart?repos=xllgreen/Pathology-PMPH-10edition&type=date&legend=top-left" />
   <img alt="Star History Chart" src="https://api.star-history.com/chart?repos=xllgreen/Pathology-PMPH-10edition&type=date&legend=top-left" />
 </picture>

External Transmission

Medium

• Category: Data Exfiltration
• Confidence: 50% confidence

Finding

Data is being sent to an external URL. This could be legitimate telemetry or data exfiltration. Manual review is recommended.

Content

Scanner excerpt · README.md (reported line 266)May include surrounding context.

md

<a href="https://www.star-history.com/?repos=xllgreen%2FPathology-PMPH-10edition&type=date&legend=top-left">
 <picture>
   <source media="(prefers-color-scheme: dark)" srcset="https://api.star-history.com/chart?repos=xllgreen/Pathology-PMPH-10edition&type=date&theme=dark&legend=top-left" />
   <source media="(prefers-color-scheme: light)" srcset="https://api.star-history.com/chart?repos=xllgreen/Pathology-PMPH-10edition&type=date&legend=top-left" />
   <img alt="Star History Chart" src="https://api.star-history.com/chart?repos=xllgreen/Pathology-PMPH-10edition&type=date&legend=top-left" />
 </picture>

External Transmission

Medium

• Category: Data Exfiltration
• Confidence: 50% confidence

Finding

Data is being sent to an external URL. This could be legitimate telemetry or data exfiltration. Manual review is recommended.

Content

Scanner excerpt · README_EN.md (reported line 159)May include surrounding context.

md

<a href="https://www.star-history.com/?repos=xllgreen%2FPathology-PMPH-10edition&type=date&legend=top-left">
 <picture>
   <source media="(prefers-color-scheme: dark)" srcset="https://api.star-history.com/chart?repos=xllgreen/Pathology-PMPH-10edition&type=date&theme=dark&legend=top-left" />
   <source media="(prefers-color-scheme: light)" srcset="https://api.star-history.com/chart?repos=xllgreen/Pathology-PMPH-10edition&type=date&legend=top-left" />
   <img alt="Star History Chart" src="https://api.star-history.com/chart?repos=xllgreen/Pathology-PMPH-10edition&type=date&legend=top-left" />
 </picture>

External Transmission

Medium

• Category: Data Exfiltration
• Confidence: 50% confidence

Finding

Data is being sent to an external URL. This could be legitimate telemetry or data exfiltration. Manual review is recommended.

Content

Scanner excerpt · README_EN.md (reported line 160)May include surrounding context.

md

<a href="https://www.star-history.com/?repos=xllgreen%2FPathology-PMPH-10edition&type=date&legend=top-left">
 <picture>
   <source media="(prefers-color-scheme: dark)" srcset="https://api.star-history.com/chart?repos=xllgreen/Pathology-PMPH-10edition&type=date&theme=dark&legend=top-left" />
   <source media="(prefers-color-scheme: light)" srcset="https://api.star-history.com/chart?repos=xllgreen/Pathology-PMPH-10edition&type=date&legend=top-left" />
   <img alt="Star History Chart" src="https://api.star-history.com/chart?repos=xllgreen/Pathology-PMPH-10edition&type=date&legend=top-left" />
 </picture>

External Transmission

Medium

• Category: Data Exfiltration
• Confidence: 50% confidence

Finding

Data is being sent to an external URL. This could be legitimate telemetry or data exfiltration. Manual review is recommended.

Content

Scanner excerpt · README_EN.md (reported line 161)May include surrounding context.

md

<a href="https://www.star-history.com/?repos=xllgreen%2FPathology-PMPH-10edition&type=date&legend=top-left">
 <picture>
   <source media="(prefers-color-scheme: dark)" srcset="https://api.star-history.com/chart?repos=xllgreen/Pathology-PMPH-10edition&type=date&theme=dark&legend=top-left" />
   <source media="(prefers-color-scheme: light)" srcset="https://api.star-history.com/chart?repos=xllgreen/Pathology-PMPH-10edition&type=date&legend=top-left" />
   <img alt="Star History Chart" src="https://api.star-history.com/chart?repos=xllgreen/Pathology-PMPH-10edition&type=date&legend=top-left" />
 </picture>

Natural-Language Policy Violations

Medium

• Category: Not specified by scanner
• Confidence: 96% confidence

Finding

The skill content is entirely in Chinese and provides no indication that users may interact in another language or choose a preferred locale. Under the stated policy, forcing a specific language without user opt-in is a natural-language policy violation unless the locale constraint is explicitly documented and justified.

Content

No source excerpt is available for this finding.

Natural-Language Policy Violations

Medium

• Category: Not specified by scanner
• Confidence: 92% confidence

Finding

The skill’s name, description, and full operating instructions are entirely in Chinese, with no indication that users may choose another language or locale. Under the policy rule, forcing a specific language without opt-in is a natural-language policy violation unless the locale constraint is explicitly documented and justified.

Content

No source excerpt is available for this finding.

Natural-Language Policy Violations

Medium

• Category: Not specified by scanner
• Confidence: 91% confidence

Finding

The manifest description and the entire operational guidance are written in Chinese, which imposes a specific language on users. The file does not indicate that Chinese is optional, user-selected, or required for a documented region-specific purpose, so it constitutes a natural-language locale policy issue.

Content

No source excerpt is available for this finding.

Missing User Warnings

Medium

• Category: Not specified by scanner
• Confidence: 95% confidence

Finding

The skill issues high-risk clinical alerts and recommends immediate intervention for conditions like sepsis and septicopyemia without clearly stating that it is informational only and not a substitute for licensed medical judgment. In a medical decision-support context, this can cause users to over-trust the content, potentially leading to delayed escalation, inappropriate self-triage, or unsafe non-professional decision-making in life-threatening situations.

Content

No source excerpt is available for this finding.

Natural-Language Policy Violations

Medium

• Category: Not specified by scanner
• Confidence: 93% confidence

Finding

The file forces a specific language for the skill name, description, and operational guidance, and there is no indication that users may choose another language. Under the policy, locale or language constraints should be optional or explicitly justified as region-specific.

Content

No source excerpt is available for this finding.

Natural-Language Policy Violations

Medium

• Category: Not specified by scanner
• Confidence: 95% confidence

Finding

The skill is written entirely in Chinese and provides no indication that users may choose another language or locale. This can violate a language/locale policy when a skill implicitly requires one language without documenting opt-in or justified regional scope.

Content

No source excerpt is available for this finding.

Missing User Warnings

Medium

• Category: Not specified by scanner
• Confidence: 95% confidence

Finding

This skill provides concrete pathology diagnostic criteria and management-oriented conclusions such as confirming irreversible neuronal necrosis or reversible injury, but it does not warn that the content is educational support and not a substitute for qualified clinical or pathology judgment. In a medical context, omission of that boundary can encourage overreliance by non-specialists or unsupervised users, increasing the risk of misdiagnosis, delayed escalation, or inappropriate treatment decisions.

Content

No source excerpt is available for this finding.

Natural-Language Policy Violations

Medium

• Category: Not specified by scanner
• Confidence: 95% confidence

Finding

The manifest description and the entire SKILL.md content are written exclusively in Chinese, which effectively imposes a specific language on users. Under the policy, language constraints should either be optional/opt-in or clearly justified as region-specific; neither is stated here.

Content

No source excerpt is available for this finding.

Natural-Language Policy Violations

Medium

• Category: Not specified by scanner
• Confidence: 95% confidence

Finding

The file's user-facing description and instructions are entirely in Chinese, which imposes a specific language/locale on users. There is no indication that the skill offers language choice, asks for user preference, or is explicitly limited to a Chinese-speaking or region-specific context.

Content

No source excerpt is available for this finding.

Natural-Language Policy Violations

Medium

• Category: Not specified by scanner
• Confidence: 96% confidence

Finding

The skill’s description and all user-facing instructional content are written entirely in Chinese, which imposes a specific language on users without indicating that other languages are supported or that Chinese is optional. The policy specifically calls for flagging language or locale constraints when no user choice or opt-in is provided.

Content

No source excerpt is available for this finding.

Ae4

Medium

• Category: analysis-evasion
• Confidence: 80% confidence

Finding

Suspicious Unicode normalization or mixed-script content

Content

No source excerpt is available for this finding.

Natural-Language Policy Violations

Medium

• Category: Not specified by scanner
• Confidence: 91% confidence

Finding

The skill content, including its description and operational instructions, is entirely written in Chinese, which implies a fixed language/locale for use. There is no indication that users may choose another language or that the Chinese-only constraint is required for a region-specific compliance or deployment context.

Content

No source excerpt is available for this finding.

Static analysis

No suspicious patterns detected.