sesion-clinic-workflow-platform

SUSPICIOUS: the skill’s capabilities fit a clinic workflow platform, and the scanner’s command-injection hits are false positives from documentation code. The main risk is install/execution trust: a publisher-branded skill directs users to clone and run a personal GitHub repo with extensive secret access and sensitive healthcare, messaging, invoicing, and payment integrations; use of community Baileys further raises trust concerns. No clear exfiltration proxy or overt malicious behavior is shown.