ClawAudit verdict
medical-science
The skill provides a set of medical science skills for clinical trial monitoring, medical writing, competitive intelligence, and knowledge management. It does not contain any malicious code or suspicious behavior.
⚠ Flagged for review — coarse, uncorroborated signal, not a confirmed exploit. Review the config yourself before installing.
Automated static analysis — not a human review. ClawAudit flags capabilities, not confirmed intent, and can produce false positives. Disagree with this verdict? Use Dispute below.
Findings (3)
Dynamic import() — loads module at runtime
scripts/tfl-parser.js · prose · downgraded · import('
Popular HTTP library — network access
scripts/ctgov-api.js · prose · downgraded · axios
Accesses sensitive environment variables
scripts/db.js · prose · downgraded · process.env.DB_PASSWORD
Permissions & capabilities
No declared permissions — minimal attack surface.
Is this flag fair?
Thanks — recorded.