Missing User Warnings
Medium
- Confidence
- 95% confidence
- Finding
- The skill sends user-supplied queries and receives content through a third-party service (Scavio), but the description and guidance do not clearly warn users that their prompts, search terms, and retrieved Reddit content are transmitted externally. This creates a privacy and data-governance risk because users may unknowingly send sensitive research topics or internal investigation terms to an outside API.
