fhir-developer-skill
Pass
Audited by Gen Agent Trust Hub on Sep 15, 2026
Risk Level: SAFEDYNAMIC_EXECUTION
Full Analysis
- Standard Resource References: The skill references numerous official domains and terminology systems standard to the healthcare domain, such as LOINC, SNOMED CT, and HL7. These are essential for FHIR development and do not represent unauthorized network access or exfiltration.
- Project Scaffolding Script: The file
scripts/setup_fhir_project.pyis a utility that generates a local FastAPI project structure based on predefined templates. While this involves writing executable Python files to the local file system, it is a standard developer tool pattern provided for project initialization rather than a hidden persistence or injection mechanism. - Authorization Guidance: The skill provides detailed instructions on implementing SMART on FHIR (OAuth 2.0). The examples use industry-standard patterns for scope enforcement and discovery, promoting secure authentication practices in the resulting API.
- Data Validation Patterns: The instructions emphasize proper HTTP status codes (such as 422 for validation errors) and provide correct OperationOutcome structures for error reporting, which aligns with FHIR security and interoperability best practices.
Audit Metadata