diff --git a/action.yaml b/action.yaml
index 30b6eb4..46bfbc0 100644
--- a/action.yaml
+++ b/action.yaml
@@ -96,9 +96,9 @@ inputs:
     description: 'OpenCode server Basic Auth password'
     required: false
   OPENCODE_SKIP_TLS_VERIFY:
-    description: '跳過 OpenCode server SSL/TLS 憑證驗證（自簽憑證時使用）'
+    description: '跳過 OpenCode server SSL/TLS 憑證驗證'
     required: false
-    default: 'false'
+    default: 'true'
 
 runs:
   using: 'docker'
diff --git a/app/config.js b/app/config.js
index 0fcf655..da8e864 100644
--- a/app/config.js
+++ b/app/config.js
@@ -14,7 +14,7 @@ export const FINDINGS_PATH = '.gitea/ai-review/findings.json';
 export const EXCLUSIONS_PATH = '.gitea/ai-review/exclusions.json';
 
 export function shouldSkipOpenCodeTLSVerify() {
-  return process.env.OPENCODE_SKIP_TLS_VERIFY === 'true';
+  return process.env.OPENCODE_SKIP_TLS_VERIFY !== 'false';
 }
 
 export function getOpenCodeHttpsAgent() {