healthex

SUSPICIOUS. The purpose and data flows are largely coherent with a legitimate HealthEx medical-records connector, and official docs support the same-org OAuth/MCP endpoints. However, the skill's core functionality relies on an undocumented local healthex binary with no verifiable install source or release integrity evidence in the provided material. Because that binary handles OAuth tokens and sensitive health data, the supply-chain risk is high even without proof of malicious intent.