medical-device-supplier-compliance@0.1.4
VERIFIEDPublisher claims: "Supplier compliance check for medical device manufacturers: it walks through qualifying and re-qualifying suppliers — collecting licences and certificates, checking QMS status, auditing critical vendors and recording the evidence. Supplier compliance check for medical device manufacturers: it walks through qualifying and re-qualifying suppliers — collecting licences and certificates, checking QMS status, auditing critical vendors and recording the evidence. Produces a per-supplier checklist and a risk ranking so purchasing and quality teams know which vendors need an on-site audit first. Use when onboarding a new component supplier or re-reviewing the existing supplier list. 核查医疗器械原材料/组件供应商合规:ISO 13485 证书、材质证明(金属牌号/检测报告)、ROHS·REACH 符合性、UDI 供应链穿透。输出供应商合规台账与缺口清单。生成后建议用 medical-device-compliance-grader 的 C4 维度自测。" Observed in sandbox: no network, touches nothing outside the project, writes no memory.
Is [email protected] safe to install?
KillerSkills ran it in the KillerSkills honeypot sandbox (1 scenario) on 2026-11-06 and scored it 90/100 (Verified). It did what it claims and nothing else we could detect: no undeclared network egress, no credential reads, no persistent instruction writes. Summary: no network, touches nothing outside the project, writes no memory.
Behavior trace
Honeypot run · 0 s · 1 scenarios · 0 deviationsStatic findings
No findings across 287 lines in 7 files.
Cost to the agent
Tokens estimated at four characters each. Skills load their instruction text when triggered; the figure is what that costs.
Known vulnerabilities
Vulnerability advisories (OSV) cover npm and PyPI packages; this registry has no advisory database.