pdf-ocr-skill

MEDIUM W012: Unverifiable external dependency detected (runtime URL that controls agent).

• Potentially malicious external URL detected (high risk: 0.70). The skill's SiliconFlow engine makes runtime POST requests to https://api.siliconflow.cn/v1/chat/completions and consumes the model's responses as the OCR output (i.e., external model-generated text directly controls the skill's returned content), which is a runtime external dependency that can influence agent behavior.