analysis-methods
Pass
Audited by Gen Agent Trust Hub on Jul 3, 2026
Risk Level: SAFECOMMAND_EXECUTIONEXTERNAL_DOWNLOADS
Full Analysis
- [COMMAND_EXECUTION]: The
fhir_helpers.pyscript usessubprocess.run()to executecurlfor fetching data from the FHIR server. This is explicitly mandated inSKILL.mdbecause the standardrequestslibrary is unavailable in the execution sandbox. The implementation passes arguments as a list and does not useshell=True, which is a safe practice for invoking system commands. - [EXTERNAL_DOWNLOADS]: The skill retrieves clinical data from the SMART on FHIR public test server ("https://r4.smarthealthit.org"). This is the intended functionality of the skill. The data is parsed as JSON and used for analysis within the Python environment.
Audit Metadata