ClawAudit verdict
Streamline Healthcare Conversations with Google Cloud Dialogflow & Twilio Integration
healthcare-chatbot-pro
The skill appears to be a legitimate healthcare chatbot solution, with no indication of malicious behavior.
โ Flagged for review โ coarse, uncorroborated signal, not a confirmed exploit. Review the config yourself before installing.
Automated static analysis โ not a human review. ClawAudit flags capabilities, not confirmed intent, and can produce false positives. Disagree with this verdict? Use Dispute below.
Findings (2)
Possible hardcoded credential
SKILL.md ยท prose ยท downgraded ยท apiKey: 'YOUR_CLAWHUB_KEY
<script> tag in markdown โ potential code injection
SKILL.md ยท prose ยท downgraded ยท <script
Permissions & capabilities
Requires 5 environment variables. (4 sensitive: OPENAI_API_KEY, TWILIO_AUTH_TOKEN, EMR_API_KEY, CRM_API_KEY). Requires 2 system binaries.
Is this flag fair?
Thanks โ recorded.