12Health systemsBelow the top 20
An STI chat that is also a lead-gen form
CapabilityDomain knowledgeImpact domainCap-adjacent
Statement (NASA form)
Given that clinics already outsource triage, there is a possibility of a result or a name in a vendor CRM resulting in intimate care as a funnel.
Likelihood
3Probable
Consequence
3Major
Urgency
3Priority
Personal slice · health_self. Experimental household card. Not a certified finding.
Composite 12 = 3×3 + 3
Applicable mitigations
Controls · Short-lived, narrowly scoped tokens for every tool call · Mandatory secret scanning before a skill can be listed · No shared tool state across agent sessions · Hard fences on diagnosis, dosing, and triage language · Grounded, dated medical sources with uncertainty on the surface · Regulate high-stakes health modes as medical devices