Caveat verdict
heartvoice_cloud
ecg-ai-diagnosis
ECG signal analysis skill that submits ECG JSON data to the HeartVoice official API using a declared API key; data flow is transparent and matches the stated medical signal analysis purpose.
⚠ Flagged for review — coarse, uncorroborated signal, not a confirmed exploit. Review the config yourself before installing.
Automated static analysis — not a human review. Caveat flags capabilities, not confirmed intent, and can produce false positives. Disagree with this verdict? Use Dispute below.
Permission integrity
package_install
Findings (3)
Possible hardcoded credential
SKILL.md · code · API_KEY="your_api_key
Instruction-prose smuggling shape detected: collects a sensitive target ("API Key") and emits it outward ("Report"). Phrased as prose with no trigger tokens — a semantic prompt-injection / data-exfil pattern the syntactic scanners can't see. Final tier capped at Caution; review the instructions before installing.
SKILL.md · | Situation | Action | |---|---| | File not found | Report the exact path; ask user for the correct path | | Missing JSON fields | List the missing required fie
Python os.environ.get — reads environment variable
scripts/call_api.py · prose · downgraded · os.environ.get(
Permissions & capabilities
Requires 1 environment variable. (1 sensitive: HEARTVOICE_API_KEY).
package_install Is this flag fair?
Thanks — recorded.