Lp3
Medium
- Category
- MCP Least Privilege
- Confidence
- 94% confidence
- Finding
- The skill declares no permissions while its documented behavior requires environment access, file read/write, network communication, and shell execution. That mismatch prevents informed consent and undermines policy controls, especially because the skill can upload local files, store credentials, and invoke a bundled client for remote actions.
