openevidence-data-handling
Ensures HIPAA-compliant handling of PHI data for OpenEvidence integrations, focusing on data protection and compliance in clinical AI workflows.
Install this skill
or
78/100
Security score
The openevidence-data-handling skill was audited on May 12, 2026 and we found 10 security issues across 4 threat categories. Review the findings below before installing.
Categories Tested
Security Issues
medium line 47
Template literal with variable interpolation in command context
SourceSKILL.md
| 47 | headers: { Authorization: `Bearer ${process.env.OPENEVIDENCE_API_KEY}`, 'Content-Type': 'application/json' }, |
medium line 68
Template literal with variable interpolation in command context
SourceSKILL.md
| 68 | const res = await fetch(`https://api.openevidence.com/v1/evidence/${id}`, { |
medium line 69
Template literal with variable interpolation in command context
SourceSKILL.md
| 69 | headers: { Authorization: `Bearer ${process.env.OPENEVIDENCE_API_KEY}` }, |
low line 45
Fetch to external URL
SourceSKILL.md
| 45 | const res = await fetch('https://api.openevidence.com/v1/query', { |
low line 47
Access to .env file
SourceSKILL.md
| 47 | headers: { Authorization: `Bearer ${process.env.OPENEVIDENCE_API_KEY}`, 'Content-Type': 'application/json' }, |
low line 69
Access to .env file
SourceSKILL.md
| 69 | headers: { Authorization: `Bearer ${process.env.OPENEVIDENCE_API_KEY}` }, |
low line 45
External URL reference
SourceSKILL.md
| 45 | const res = await fetch('https://api.openevidence.com/v1/query', { |
low line 68
External URL reference
SourceSKILL.md
| 68 | const res = await fetch(`https://api.openevidence.com/v1/evidence/${id}`, { |
low line 118
External URL reference
SourceSKILL.md
| 118 | - [OpenEvidence Platform](https://www.openevidence.com) |
low line 119
External URL reference
SourceSKILL.md
| 119 | - [HIPAA De-Identification Guidance](https://www.hhs.gov/hipaa/for-professionals/privacy/special-topics/de-identification/) |
Scanned on May 12, 2026
View Security DashboardGitHub Stars 1.5K
Rate this skill
Categoryhealthcare
UpdatedMay 13, 2026
claudeclaude-codefrontenddesigndocxapitestinghealth-informaticsclinical-researcherproduct-manager🇺🇸 UShealthcareproduct
jeremylongshore/claude-code-plugins-plus-skills