diff --git a/plugin-catalog/reading-buddy.yaml b/plugin-catalog/reading-buddy.yaml
index 92c4ee3eda..c992546543 100644
--- a/plugin-catalog/reading-buddy.yaml
+++ b/plugin-catalog/reading-buddy.yaml
@@ -7,7 +7,7 @@ description: 'Local-first WeRead (微信读书) reading companion: syncs bookshe
   previews. Engine pinned to an immutable git commit (e5f6673) over npx stdio; Portable
   Agent Plugins v1 package (mcp.json + skills/), needs Node.js 20+ on PATH. All data stays
   in PLUGIN_DATA; never posts to WeRead — cards and reviews are local files saved only
-  after user confirmation.'
+  after user confirmation. Disclosure — live mode sends your WEREAD_API_KEY as a Bearer token plus book ids and paging cursors to i.weread.qq.com (Tencent''s WeRead agent gateway) and nothing else; the engine''s MCP tool descriptions and error messages are Chinese-only while the skills are English-first; the engine''s npm dependencies resolve as caret ranges at first launch.'
 maintainer: harrylabsj
 tier: community
 category: tools