openevidence-prod-checklist
Ensures production readiness for OpenEvidence clinical AI deployments with a comprehensive compliance and security checklist.
Install this skill
Security score
The openevidence-prod-checklist skill was audited on May 12, 2026 and we found 13 security issues across 3 threat categories. Review the findings below before installing.
Categories Tested
Security Issues
Template literal with variable interpolation in command context
| 77 | const headers = { Authorization: `Bearer ${apiKey}`, 'Content-Type': 'application/json' }; |
Template literal with variable interpolation in command context
| 80 | const ping = await fetch(`${base}/health`, { headers, signal: AbortSignal.timeout(5000) }); |
Template literal with variable interpolation in command context
| 81 | console.assert(ping.ok, `API unreachable: ${ping.status}`); |
Template literal with variable interpolation in command context
| 84 | const auth = await fetch(`${base}/me`, { headers }); |
Template literal with variable interpolation in command context
| 89 | const query = await fetch(`${base}/query`, { |
Template literal with variable interpolation in command context
| 95 | console.assert(query.ok, `Clinical query failed: ${query.status}`); |
Template literal with variable interpolation in command context
| 101 | await fetch(`${base}/query`, { |
Template literal with variable interpolation in command context
| 108 | console.assert(elapsed < 3000, `Response time ${elapsed}ms exceeds 3s SLA`); |
Template literal with variable interpolation in command context
| 111 | const audit = await fetch(`${base}/audit-log?limit=1`, { headers }); |
Template literal with variable interpolation in command context
| 112 | console.assert(audit.ok, `Audit log endpoint failed: ${audit.status}`); |
Access to .env file
| 76 | const base = process.env.OPENEVIDENCE_API_URL ?? 'https://api.openevidence.com/v1'; |
External URL reference
| 76 | const base = process.env.OPENEVIDENCE_API_URL ?? 'https://api.openevidence.com/v1'; |
External URL reference
| 127 | - [OpenEvidence Platform](https://www.openevidence.com) |