treatment-plans

Pass

Audited by Gen Agent Trust Hub on Jun 13, 2026

Risk Level: SAFECOMMAND_EXECUTIONDATA_EXFILTRATION
Full Analysis
  • [COMMAND_EXECUTION]: The script scripts/generate_schematic.py uses the subprocess.run function to execute a secondary internal script, generate_schematic_ai.py. This implementation follows security best practices by passing arguments as a list and avoiding the use of shell=True, which effectively prevents shell injection vulnerabilities.
  • [DATA_EXFILTRATION]: The script scripts/generate_schematic_ai.py performs network requests to the OpenRouter API (openrouter.ai) to facilitate the generation and review of scientific schematics. These requests transmit user-provided descriptions of the diagrams to the external service. This is a core feature of the skill, and the risk of sensitive data exposure is mitigated by the skill's extensive focus on HIPAA-compliant de-identification and the inclusion of validation scripts that check for the presence of protected health information (PHI) before processing.
Audit Metadata
Risk Level
SAFE
Analyzed
Jun 13, 2026, 06:23 AM