document-ocr-agent

SUSPICIOUS. The skill's OCR purpose generally matches its capabilities, and it avoids dangerous local execution, but it routes potentially sensitive documents through AgentPMT as an intermediary instead of directly to Google Document AI and also encourages transitive installation of additional skills. This is a moderate security-risk remote SaaS integration, not confirmed malware.