clinical-reports

SUSPICIOUS: the core clinical-writing purpose is mostly coherent, but the skill expands scope in two notable ways: mandatory dependence on another skill and optional routing of sensitive medical content to third-party OpenRouter LLM services. The uv prerequisite is official and not malicious by itself, but still adds moderate supply-chain risk due to curl|sh-style installation and lack of pinning in the skill text.