Missing User Warnings
Medium
- Confidence
- 91% confidence
- Finding
- The skill documents a GDPR 'forget subscriber' endpoint that irreversibly deletes subscriber data, but it does not add a clear warning that this action is permanent and should require explicit confirmation of the exact target. In an agent context, destructive privacy operations are higher risk because a mistaken identifier or ambiguous user request can cause unrecoverable data loss.
