treatment-plans
Pass
Audited by Gen Agent Trust Hub on Jun 13, 2026
Risk Level: SAFECOMMAND_EXECUTIONDATA_EXFILTRATION
Full Analysis
- [COMMAND_EXECUTION]: The script
scripts/generate_schematic.pyuses thesubprocess.runfunction to execute a secondary internal script,generate_schematic_ai.py. This implementation follows security best practices by passing arguments as a list and avoiding the use ofshell=True, which effectively prevents shell injection vulnerabilities. - [DATA_EXFILTRATION]: The script
scripts/generate_schematic_ai.pyperforms network requests to the OpenRouter API (openrouter.ai) to facilitate the generation and review of scientific schematics. These requests transmit user-provided descriptions of the diagrams to the external service. This is a core feature of the skill, and the risk of sensitive data exposure is mitigated by the skill's extensive focus on HIPAA-compliant de-identification and the inclusion of validation scripts that check for the presence of protected health information (PHI) before processing.
Audit Metadata