Lp3
Medium
- Category
- MCP Least Privilege
- Confidence
- 92% confidence
- Finding
- The skill advertises use of an external API token and Bash/Node invocation that will perform network access, but the manifest does not declare corresponding permissions. This creates a transparency and policy-enforcement gap: users or platforms may not realize the skill can send prompts and possibly sensitive image-related data to a third-party service.
