Lp3
Medium
- Category
- MCP Least Privilege
- Confidence
- 95% confidence
- Finding
- The skill declares only Bash tooling but does not declare network permissions, even though its documented usage depends on calling the external Neta API. Undeclared network access weakens the trust boundary for users and agents, because the skill can transmit prompts, tokens, and possibly image references to a third-party service without an explicit permission signal.
