markitdown-ocr

SUSPICIOUS: the core OCR guidance is mostly aligned with its stated Microsoft/MarkItDown purpose and uses official sources, but it also encourages credential and document forwarding to arbitrary OpenAI-compatible endpoints, includes a questionable Azure install instruction, and adds unnecessary transitive skill-install commands. Not confirmed malware, but medium risk due to third-party endpoint and trust-chain expansion.