sesion-clinic-workflow
Warn
Audited by Socket on Oct 8, 2026
1 alert found:
AnomalyAnomalySKILL.md
LOWAnomalyLOW
SKILL.md
SUSPICIOUS. The functional capabilities mostly match the stated clinic-platform purpose, and external data flows go to plausible official services. The main issue is install trust: the skill is published as ara.so but instructs cloning and executing a different personal GitHub repository, creating a notable provenance gap for a high-sensitivity healthcare workflow with many secrets and patient-data flows.
Confidence: 89%Severity: 66%
Audit Metadata