Lp3
Medium
- Category
- MCP Least Privilege
- Confidence
- 94% confidence
- Finding
- The skill declares no permissions while instructing use of local file access, shell execution, network calls, environment/credential handling, and file modification via an updater. That mismatch prevents informed consent and weakens sandboxing or policy enforcement, making the skill more dangerous because it also handles uploads, credentialed remote operations, and local package changes.
