Lp3
Medium
- Category
- MCP Least Privilege
- Confidence
- 95% confidence
- Finding
- The skill declares no permissions while its documented behavior includes shell execution, filesystem access, environment access, and networked tool invocation. That mismatch can bypass least-privilege review and cause operators to approve a package without understanding that it can read local data, persist files, and contact remote services.
