alterlab-clinical-reports
Pass
Audited by Gen Agent Trust Hub on Apr 12, 2026
Risk Level: SAFE
Full Analysis
- [SAFE]: The skill is a legitimate academic and professional toolkit with no malicious code or remote dependencies.
- [COMMAND_EXECUTION]: The skill uses the Bash tool to run local Python scripts for report validation and template generation. All scripts (e.g., check_deidentification.py, validate_case_report.py) are written in plain Python using standard libraries and perform no unsafe system calls.
- [DATA_EXPOSURE]: The skill includes privacy-preserving features, such as regex-based scanners for the 18 HIPAA identifiers, which help users ensure patient confidentiality.
- [INDIRECT_PROMPT_INJECTION]: The skill processes untrusted clinical data files. Ingestion points: Files are read by scripts/check_deidentification.py, scripts/extract_clinical_data.py, and scripts/format_adverse_events.py. Boundary markers: None present. Capability inventory: The skill uses Bash and Write tools. Sanitization: None performed. The risk is minimal as the data is processed via regex for search and formatting tasks.
Audit Metadata