clinical-trial-protocol-skill

SUSPICIOUS. The skill’s purpose and core capabilities are broadly consistent with clinical research/protocol drafting, and the pip-installed scientific libraries are normal. However, the required external clinical-trials MCP dependency is insufficiently identified and not verifiably tied to the publisher, creating a meaningful trust gap. Data flows appear aligned with the stated workflow and there is no direct credential harvesting or overt exfiltration, but the ambiguous MCP provenance and external-content processing raise medium security concern.