document-diff

SUSPICIOUS: the skill is purpose-aligned and not overtly malicious, but it sends full document contents and the API key to a third-party service for parsing. That data flow is proportionate to the stated function yet introduces medium security risk, especially for sensitive documents and because the external service trust model is only partially verifiable from the available evidence.