Missing User Warnings
Medium
- Confidence
- 96% confidence
- Finding
- The skill encourages users to upload TXT, DOCX, PDF, and other content to a remote third-party API but does not prominently warn that user content will leave the local environment and be processed externally. This can lead to inadvertent disclosure of sensitive documents, proprietary material, or personal data, especially because the description emphasizes convenience and automatic handling.
