clinical-decision-support
Pass
Audited by Gen Agent Trust Hub on May 28, 2026
Risk Level: SAFE
Full Analysis
- [COMMAND_EXECUTION]: The skill implements a modular script architecture where
scripts/generate_schematic.pyutilizes the Pythonsubprocessmodule to executescripts/generate_schematic_ai.py. This is used to separate high-level logic from the AI-driven schematic generation and does not pose a security risk, as the execution is limited to internal skill files and avoids shell injection by passing arguments as a list.\n- [DATA_EXFILTRATION]: To generate scientific diagrams, the skill makes authorized network requests to the OpenRouter API (openrouter.ai). This communication is restricted to the intended functionality of creating schematics and follows security best practices by managing API keys through environment variables or local.envfiles rather than hardcoding them.\n- [EXTERNAL_DOWNLOADS]: The skill relies on standard, well-known libraries from the official Python Package Index (PyPI) such aspandas,numpy,scipy,lifelines, andmatplotlib. These are established tools in the scientific community for data analysis and visualization.\n- [SAFE]: The skill includes defensive features like thescripts/validate_cds_document.pytool, which proactively checks clinical documents for quality, completeness, and HIPAA-compliant de-identification of sensitive patient information before finalization.
Audit Metadata