Lp3
Medium
- Category
- MCP Least Privilege
- Confidence
- 89% confidence
- Finding
- The skill documentation describes code behavior with file read/write capabilities, but no explicit permissions are declared. In a healthcare-oriented de-identification tool, this mismatch is risky because it processes highly sensitive PHI/PII and could read unintended files or write sensitive outputs and audit logs to unsafe locations if the runtime trusts undeclared capabilities.
