Missing User Warnings
Medium
- Confidence
- 95% confidence
- Finding
- The skill repeatedly instructs sending user-provided documents to a third-party OCR service but never includes an explicit user-facing warning that document contents leave the local environment. This is dangerous because users may submit sensitive scans (IDs, invoices, medical or legal records) without informed consent about external transmission and retention behavior.
