15Health systemsBelow the top 20
A cycle tracker that is a data broker
CapabilityDomain knowledgeImpact domainBoth
Statement (NASA form)
Given that period apps already monetise the chart, there is a possibility of pregnancy or fertility inferred and sold resulting in intimate health as a segment.
Likelihood
4Likely
Consequence
3Major
Urgency
3Priority
Personal slice · health_self. Experimental household card. Not a certified finding.
Composite 15 = 4×3 + 3
Applicable mitigations
Controls · Short-lived, narrowly scoped tokens for every tool call · Mandatory secret scanning before a skill can be listed · No shared tool state across agent sessions · Hard fences on diagnosis, dosing, and triage language · Grounded, dated medical sources with uncertainty on the surface · Regulate high-stakes health modes as medical devices