Missing User Warnings
Medium
- Confidence
- 92% confidence
- Finding
- The skill instructs users to send image data to an external paid endpoint but does not clearly warn that submitted images leave the local environment and are transmitted to a third-party service. This can lead to unintended disclosure of sensitive or proprietary images and surprise payment exposure, especially if users assume processing is local or privacy-preserving.
