Lp3
Medium
- Category
- MCP Least Privilege
- Confidence
- 88% confidence
- Finding
- The skill declares no permissions even though its documented behavior requires environment access, filesystem reads/writes, and shell command generation/execution paths. This creates a trust and review gap: operators may authorize or invoke the skill without understanding that it can touch local files and produce destructive shell commands.
