cowork-medical-bill-auditor

HIGH W007: Insecure credential handling detected in skill instructions.

• Insecure credential handling detected (high risk: 0.90). The skill requires extracting and inserting verbatim patient/provider identifiers and exact EOB/billing lines (e.g., account numbers, service dates, specific EOB lines) into dispute letters and reports, which forces the LLM to reproduce sensitive values from user documents in its output.

MEDIUM W011: Third-party content exposure detected (indirect prompt injection risk).

• Third-party content exposure detected (high risk: 0.75). The required workflow ingests a user-provided folder of provider bills and insurer EOBs (outsider-authored documents relative to the operating user), and the agent then uses their free-text contents to generate the audit report and dispute drafts—so the LLM context can include outsider-authored prose from those documents.