Tp2
High
- Category
- MCP Tool Poisoning
- Confidence
- 85% confidence
- Finding
Mixing characters from multiple Unicode scripts in a single identifier is a common technique to create visually ambiguous tool names.
- Content
Security audit
Pediatrics-PMPH-10edition
Security checks for vulnerabilities and agentic risk
Overview
This is a pediatric medical knowledge skill with no code or persistence, but it contains many directly actionable child treatment and dosing workflows that are not consistently guarded for clinician-only supervised use.
Install only for qualified pediatric clinicians or supervised medical education. Do not use it as a standalone treatment, dosing, emergency, or caregiver decision tool; require clinician review, current local guidelines, patient-specific contraindication checks, and emergency escalation before acting on outputs.
Vulnerability Patterns
- Skill Instruction HijackingAlters the agent's session goals or safety constraints when the skill loads
- Agent Memory PoisoningWrites attacker-controlled rules into memory that affect later sessions
- Remote Payload Retrieval and ExecutionFetches external code whose behavior can change after review
- Embedded Malicious CodeShips malicious scripts inside the skill and executes them locally
- Unauthorized Access and Privilege EscalationObtains permissions beyond the task's legitimate needs
Vulnerability Patterns
- Data ExfiltrationExternal Transmission, Env Variable Harvesting, File System Enumeration
- MCP Tool PoisoningHidden Instructions, Unicode Deception, Parameter Description Injection
- Prompt InjectionInstruction Override, Hidden Instructions, Exfiltration Commands
- Privilege EscalationExcessive Permissions, Sudo/Root Execution, Credential Access
- Supply ChainUnpinned Dependencies, External Script Fetching, Obfuscated Code
Findings (262)
Ae1
High
- Category
- analysis-evasion
- Confidence
- 100% confidence
- Finding
Referenced artifact was not completely inspected
- Content
md 本仓库包含 **184 项** 儿科学临床核心技能，每项技能对应一个独立目录，内含 `SKILL.md` 标准技能文件。
Missing User Warnings
High
- Category
- Not specified by scanner
- Confidence
- 96% confidence
- Finding
This skill gives concrete pediatric diagnostic criteria, steroid dosing, transfusion thresholds, rituximab regimens, and surgical/immunosuppressive escalation guidance without an explicit warning that it is for qualified clinicians and not a substitute for urgent specialist judgment. In a high-risk pediatric hematology context, omission of such guardrails can enable inappropriate self-use, overconfident automation, or delayed emergency care, potentially causing serious harm.
- Content
Missing User Warnings
High
- Category
- Not specified by scanner
- Confidence
- 98% confidence
- Finding
This skill provides concrete anti-tuberculosis drug combinations, phase durations, and pediatric dosing details without any explicit warning that the content is for qualified clinician use only and must not be applied without patient-specific medical evaluation. Because it covers serious conditions such as miliary tuberculosis and tuberculous meningitis, omission of supervision warnings increases the chance of unsafe self-treatment, dosing errors, use despite contraindications, and delayed expert care.
- Content
Missing User Warnings
High
- Category
- Not specified by scanner
- Confidence
- 95% confidence
- Finding
This skill provides pediatric nephrotic syndrome diagnostic criteria, subtype classification, and steroid-response assessment in a way that can directly influence medical decision-making, yet it does not warn that the output is informational only and not a substitute for clinician judgment. In a pediatric context, omission of such safeguards increases the risk that users over-rely on the skill for diagnosis or treatment interpretation, potentially delaying specialist evaluation or leading to harmful misclassification.
- Content
Missing User Warnings
High
- Category
- Not specified by scanner
- Confidence
- 97% confidence
- Finding
This skill gives concrete pediatric medication dosing, treatment initiation, dose adjustment context, and follow-up intervals for congenital hypothyroidism without an explicit restriction that it is for qualified clinicians and not a substitute for individualized medical judgment. In a pediatric setting, misuse by non-clinicians or overreliance by an agent could lead to underdosing, overdosing, delayed recognition of central hypothyroidism or adrenal insufficiency, and serious harm to infant neurodevelopment or acute endocrine stability.
- Content
Missing User Warnings
High
- Category
- Not specified by scanner
- Confidence
- 91% confidence
- Finding
This file provides age- and weight-based levothyroxine dosing guidance for congenital hypothyroidism without an explicit safety warning that it is reference information only and must be applied under clinician oversight. In a medical knowledge skill, omission of that warning increases the risk that users or downstream agents may treat the table as direct prescribing guidance, causing dosing errors and patient harm, especially in infants where small miscalculations matter.
- Content
Missing User Warnings
High
- Category
- Not specified by scanner
- Confidence
- 95% confidence
- Finding
The skill gives treatment-escalation advice for a pediatric condition—such as adding corticosteroids, IVIG, or changing antibiotics—without an explicit warning that this is clinician-directed medical guidance requiring professional judgment. In a high-risk pediatric context, users may over-trust the output and act without appropriate supervision, leading to delayed correct treatment, inappropriate medication use, or harm from contraindicated therapies.
- Content
Missing User Warnings
High
- Category
- Not specified by scanner
- Confidence
- 95% confidence
- Finding
This skill gives specific pediatric glucocorticoid dosing, monitoring, and adjustment guidance for DMD/BMD without an explicit safety warning that medication decisions must be made by qualified clinicians and can cause serious harm if applied incorrectly. Because it concerns children and includes actionable dose ranges and follow-up intervals, a user could over-trust the content and make unsafe treatment decisions, leading to adrenal suppression, growth effects, hypertension, hyperglycemia, osteoporosis, or delayed recognition of complications.
- Content
Missing User Warnings
High
- Category
- Not specified by scanner
- Confidence
- 96% confidence
- Finding
This is a true safety vulnerability because the skill provides concrete pediatric antiparasitic dosing and instructs whole-family/group treatment without requiring clinician or pharmacist confirmation of diagnosis, age suitability, contraindications, pregnancy status, drug interactions, or product-specific labeling. In a pediatric context, users may self-treat children or other household members inappropriately, leading to misdiagnosis, incorrect dosing, delayed care, or medication harm.
- Content
Missing User Warnings
High
- Category
- Not specified by scanner
- Confidence
- 97% confidence
- Finding
The skill provides structured medical diagnostic guidance for epilepsy, including differential diagnosis, syndrome classification, etiology workup, and recommendations for additional testing or referral, but it does not clearly warn that it is not a substitute for licensed clinical judgment. In a medical context, users may over-rely on the stepwise workflow as authoritative decision support, increasing the risk of misdiagnosis, delayed urgent care, or inappropriate reassurance/treatment, especially for seizure mimics and pediatric or emergency presentations.
- Content
Missing User Warnings
High
- Category
- Not specified by scanner
- Confidence
- 99% confidence
- Finding
The skill provides high-risk pediatric medication and intervention guidance, including weight/age-based oseltamivir dosing and severe neurologic management with mannitol and IVIG, but does not warn about contraindications, monitoring requirements, off-label nuances, or the need for urgent specialist supervision. These interventions are clinically sensitive, and using them from a static markdown skill without safeguards can cause underdosing, overdosing, missed alternative diagnoses, or harm in critically ill children.
- Content
Missing User Warnings
High
- Category
- Not specified by scanner
- Confidence
- 97% confidence
- Finding
The skill outputs pediatric infectious disease diagnoses, treatment plans, and dosing instructions without any safety boundary stating that this content is for qualified clinicians, requires patient-specific assessment, or must be verified against current guidelines. In a pediatric context, omission of supervision and risk warnings can lead to unsafe self-treatment, delayed escalation, or medication errors for children, who are especially sensitive to dosing mistakes.
- Content
Missing User Warnings
High
- Category
- Not specified by scanner
- Confidence
- 97% confidence
- Finding
The skill gives actionable pediatric fluid-therapy guidance, including recommendations that vary by serum sodium and warnings about cerebral edema and shock, but it does not clearly restrict use to qualified clinicians or state that it is not a substitute for urgent bedside judgment. In pediatrics, incorrect fluid selection or correction rate can cause severe harm, so omission of explicit clinical-use boundaries materially increases misuse risk.
- Content
Missing User Warnings
High
- Category
- Not specified by scanner
- Confidence
- 97% confidence
- Finding
This skill provides detailed pediatric emergency treatment steps, including weight-based dosing, vasopressors, steroids, anticoagulation, ECMO, and CRRT escalation, but does not explicitly require immediate qualified clinician oversight, local protocol verification, or dose/contraindication confirmation. In a high-acuity condition like fulminant meningococcal shock, omission of those guardrails can enable inappropriate self-directed use, protocol drift, or harmful dosing/application errors with life-threatening consequences.
- Content
Intent-Code Divergence
High
- Category
- Not specified by scanner
- Confidence
- 98% confidence
- Finding
The skill gives contradictory and medically unsafe sleep-positioning guidance: it says all children must sleep in the left lateral position, but later notes infants must never be prone during sleep, and the rationale given is inconsistent with established infant safe-sleep practice. In a pediatric clinical guidance skill, ambiguous or incorrect positioning advice can directly cause harmful caregiver actions, including increased aspiration risk, unsafe sleep practices, or delayed correction of worsening GERD.
- Content
Missing User Warnings
High
- Category
- Not specified by scanner
- Confidence
- 98% confidence
- Finding
This skill provides concrete pediatric diagnostic and treatment instructions, including provocative testing, glucose infusion rates, tube feeding, and disease-specific management, without an explicit warning that it is decision support only and not a substitute for pediatric/metabolic specialist judgment. In a pediatric setting, omission of such guardrails can encourage overreliance, inappropriate self-directed care, or unsafe application by non-specialists, potentially causing hypoglycemia mismanagement, delayed diagnosis, or harm from improper testing.
- Content
Missing User Warnings
High
- Category
- Not specified by scanner
- Confidence
- 97% confidence
- Finding
This skill provides concrete pediatric coagulation factor dosing formulas, maintenance schedules, and treatment durations without an explicit warning that the output must be verified by a qualified clinician and adjusted for patient-specific factors such as inhibitor status, actual factor recovery, product type, severity/site of bleeding, laboratory monitoring, and perioperative context. In a high-risk pediatric hematology setting, users could treat the generated dose as authoritative, leading to underdosing or overdosing and resulting in uncontrolled bleeding, thrombosis, or other serious harm.
- Content
Missing User Warnings
High
- Category
- Not specified by scanner
- Confidence
- 98% confidence
- Finding
The file provides concrete hemophilia factor VIII/IX dosing formulas and pharmacokinetic parameters without any explicit warning that they are educational reference material and not a substitute for clinician judgment. In a clinical skill knowledge base, users may over-trust the formulas and apply them directly without accounting for residual factor activity, assay differences, product-specific recovery, bleeding severity, inhibitor status, age, or individualized pharmacokinetics, creating a real risk of underdosing or overdosing.
- Content
Missing User Warnings
High
- Category
- Not specified by scanner
- Confidence
- 95% confidence
- Finding
The file provides specific prophylactic clotting-factor dosing regimens for hemophilia A and B without any visible warning that dosing must be individualized by a qualified clinician based on severity, inhibitor status, product type, pharmacokinetics, age, weight, bleeding phenotype, and treatment setting. Because this is a pediatric clinical skill knowledge base and the content is directly actionable medication guidance, omission of supervision/context materially increases the risk of harmful misuse, underdosing, overdosing, or inappropriate substitution for professional care.
- Content
Missing User Warnings
High
- Category
- Not specified by scanner
- Confidence
- 94% confidence
- Finding
This skill provides pediatric medical triage and severity classification for infant diarrhea, including identifying 'severe' presentations such as dehydration, electrolyte disturbance, and metabolic acidosis, but does not instruct the user to seek urgent professional or emergency care when those red-flag features are present. In a high-risk infant-care context, omission of escalation guidance can delay treatment and increase the risk of rapid deterioration, shock, seizures, or death.
- Content
Missing User Warnings
High
- Category
- Not specified by scanner
- Confidence
- 98% confidence
- Finding
The skill gives direct diagnostic and treatment decision rules for suspected pediatric intussusception, including when to immediately perform enema reduction and when to convert to surgery, but it does not clearly restrict use to qualified clinicians or state that it cannot replace real-time physician judgment. In a high-risk pediatric emergency context, omission of those safeguards can lead non-professionals or under-supervised users to act on incomplete criteria, delaying imaging, resuscitation, specialist consultation, or appropriate operative care.
- Content
Missing User Warnings
High
- Category
- Not specified by scanner
- Confidence
- 94% confidence
- Finding
The skill gives treatment-escalation advice ('应启动系统性化疗并密切监测预后') in a high-stakes pediatric oncology context without an explicit warning that this is clinician-facing decision support and not a substitute for specialist judgment. Even though the content is medically plausible, omission of guardrails can cause overreliance, inappropriate chemotherapy initiation, or failure to consider differential diagnoses and guideline updates.
- Content
Missing User Warnings
High
- Category
- Not specified by scanner
- Confidence
- 96% confidence
- Finding
This skill gives actionable pediatric emergency instructions for differentiating and treating myasthenic versus cholinergic crisis, including drug administration, airway intervention, and immunotherapy, but it does not explicitly require qualified clinician oversight, independent dose verification, contraindication review, or adherence to local emergency protocols. In a life-threatening pediatric setting, omission of such guardrails can contribute to misdiagnosis, medication error, inappropriate test use, or delayed escalation, all of which can cause severe harm or death.
- Content
Missing User Warnings
High
- Category
- Not specified by scanner
- Confidence
- 98% confidence
- Finding
This skill gives concrete neonatal emergency treatment instructions, including IV dextrose bolus rates, infusion dosing, steroids, diazoxide, octreotide, and glucagon, but does not restrict use to licensed clinicians or provide emergency-care disclaimers. In an agent setting, such actionable guidance could be surfaced to unqualified users or applied without adequate clinical context, creating a substantial risk of patient harm from dosing errors, delayed escalation, or inappropriate treatment.
- Content
Static analysis
No suspicious patterns detected.