image-to-text

MEDIUM W012: Unverifiable external dependency detected (runtime URL that controls agent).

• Potentially malicious external URL detected (high risk: 0.70). The runtime script (scripts/image-to-text.sh) runs "npm install" if node_modules is missing and the README notes Tesseract downloads language data on first run, so the skill will fetch and execute remote npm/Tesseract code at runtime rather than being fully local.