ocrmypdf-batch

MEDIUM W012: Unverifiable external dependency detected (runtime URL that controls agent).

• Potentially malicious external URL detected (high risk: 0.90). The skill contains runtime Docker commands that pull and run the remote image jbarlow83/ocrmypdf (and the variant jbar65t83/ocrmypdf), which fetches and executes remote code at runtime (and the GitHub Actions step uses actions/checkout@v4 which is also fetched and executed by the runner); these are required runtime dependencies that execute external code.

MEDIUM W021: Hidden or invisible Unicode characters detected (potential obfuscation or prompt injection).

• Hidden Unicode characters detected (1 type(s) found)