Missing User Warnings
Medium
- Confidence
- 91% confidence
- Finding
- The documentation instructs the skill to upload mobile payment bill images to a third-party OCR endpoint, but it does not warn that these images and extracted fields may contain highly sensitive financial and personal data. In this skill context, the omission is meaningful because the entire feature operates on payment screenshots, making silent external transmission a privacy and data-handling risk rather than a generic API call.
