Is medxpert-llm-library safe to install?

medxpert-llm-library was flagged as MEDIUM RISK (risk score 15.2) with 5 findings detected across 11 files. Review the findings before installing.

What security issues were found in medxpert-llm-library?

Sigil detected 5 findings in medxpert-llm-library, including patterns related to install_hooks, network_exfil. See the full scan report for details.

Scans/clawhub/medxpert-llm-library

medxpert-llm-library

clawhub

Summary

medxpert-llm-library v1.28.0 was classified as MEDIUM RISK with a risk score of 15.2. Sigil detected 5 findings across 11 files, covering phases including install hooks, network exfiltration. Review the findings below before installing this package.

Package description: 🌐 官网：https://medxpert.cn（MedXpert 医械注册知识库·公开免费层）。不用买高配电脑也能部署本地大模型，做自己的图书馆（知识库）。覆盖完整链路：硬件自查与低配优化（零成本/省电/隐私/可7x24常开）、Ollama 一键部署（含中国网络踩坑）、DSH 前端 UI、模型分档（Qwen2.5 系列）、多模型协作分工（Qwen/DeepSeek/VL/Embedding...

MEDIUM RISK(15.2)

v1.28.0

3 September 2026, 05:06 UTC

by Sigil Bot

Risk Score

15.2

Findings

Files Scanned

Provenance

Registry

https://clawhub.com/skills/medxpert-llm-library

Scanned From

https://clawhub.ai/api/v1/download?slug=medxpert-llm-library&version=1.28.0

Findings by Phase

•

Phase Ordering

Phases are ordered by criticality, with the most dangerous at the top. Click any phase header to expand or collapse its findings. Critical phases are expanded by default.

install-makefile-curl

LOW

Makefile/script pipes remote content to shell

SKILL.md:212

  # Windows 下载: https://tailscale.com/download
  curl -fsSL https://tailscale.com/install.sh | sh   # Linux
  ```

Why was this flagged?

A script or Makefile pipes content from a remote URL directly into a shell (curl | sh or wget | bash). This is inherently dangerous because the remote content can change at any time, and the command runs with the current user's permissions. Rated HIGH because it requires manual execution (unlike install hooks) but still executes arbitrary remote code.

Badge

Markdown

[![Sigil Scan](https://sigilsec.ai/badge/clawhub/medxpert-llm-library)](https://sigilsec.ai/scans/B74596C2-A0EF-42C2-8738-D427095EF6EA)

HTML

<a href="https://sigilsec.ai/scans/B74596C2-A0EF-42C2-8738-D427095EF6EA"><img src="https://sigilsec.ai/badge/clawhub/medxpert-llm-library" alt="Sigil Scan"></a>

Run This Scan Yourself