Lp3
Medium
- Category
- MCP Least Privilege
- Confidence
- 90% confidence
- Finding
- The skill declares required binaries and environment variables but does not explicitly declare permissions while still instructing network access, use of secrets, and file output via saved reports. This creates a transparency and least-privilege problem: hosts or users may not realize the skill can transmit prompts externally and write artifacts to disk.
