read-ocr

SUSPICIOUS: the skill’s OCR purpose is coherent and the credential scope is modest, but data-flow integrity is weakened because both document content and tokens are routed through local wrapper scripts to a user-configurable API_URL that may not be the official Paddle endpoint. Without the script code, the main risk is unverified proxying of sensitive OCR data rather than confirmed malware.