Missing User Warnings
Medium
- Confidence
- 89% confidence
- Finding
- The skill is explicitly designed to send scientific queries, claims, and paper identifiers to a third-party API, but it does not warn users that their inputs will leave the local environment and be transmitted to open.bohrium.com. This creates a real data-handling risk because users may submit unpublished research ideas, proprietary claims, or sensitive document identifiers without informed consent.
