psique-workflow-clinic

SUSPICIOUS: The skill’s capabilities broadly match its stated clinic-management purpose, but trust is weakened by the ara.so branding versus personal GitHub install source, extensive handling of sensitive patient and billing data, and reliance on third-party/community SDKs like Baileys. No confirmed malware or hidden execution is present, but the install provenance and credential/data sensitivity make this a medium-risk skill.