Lp3
Medium
- Category
- MCP Least Privilege
- Confidence
- 91% confidence
- Finding
- The skill documentation instructs users to run shell scripts that perform network operations, but the skill declares no permissions. This creates a transparency and consent failure: operators and policy systems cannot accurately assess or constrain what the skill will do before execution, increasing the chance of unintended external access or command execution.
