Missing User Warnings
Medium
- Confidence
- 91% confidence
- Finding
- The skill documents sending arbitrary user-supplied content to a third-party remote service but does not warn that prompts, documents, code, or other inputs leave the local environment. In a skill intended for developer tasks, users may reasonably paste sensitive material, so the missing privacy/data-handling warning creates a real disclosure risk.
