fasten-ehr-integration
Pass
Audited by Gen Agent Trust Hub on Aug 20, 2026
Risk Level: SAFE
Full Analysis
- [EXTERNAL_DOWNLOADS]: The skill references JavaScript modules and CSS from
https://cdn.fastenhealth.com, which is the official content delivery network for the Fasten Connect service. - [COMMAND_EXECUTION]: The skill provides code for making authenticated API requests to
https://api.connect.fastenhealth.comand suggests using standard developer tools for webhook tunneling. - [CREDENTIALS_UNSAFE]: The skill includes instructions for managing API keys in
.envfiles and warns against exposing private keys to client-side bundles or version control. - [INDIRECT_PROMPT_INJECTION]: The skill implements a workflow for ingesting health record data from an external API (FHIR resources in NDJSON format). The ingestion point is the FHIR record files downloaded from the Fasten API. Capabilities include storage and UI rendering. The skill instructs on sanitization by rendering names/codes/dates defensively and skipping malformed lines to handle potentially untrusted external content.
Audit Metadata