Lp3
Medium
- Category
- MCP Least Privilege
- Confidence
- 88% confidence
- Finding
- The skill performs file read/write and network operations but declares no permissions, creating a transparency and policy-enforcement gap. In an agent environment, undeclared capabilities can bypass user/operator expectations and allow unreviewed data retrieval or persistence, especially because the workflow fetches external content and writes cache files.
