Description-Behavior Mismatch
Medium
- Confidence
- 92% confidence
- Finding
- The manifest and top-level description materially understate the skill’s effective scope. In addition to routine Jobber business-object access, the document exposes account metadata, requests, custom fields, and OAuth connection-management operations, which can cause users or an agent orchestrator to invoke the skill under a narrower trust assumption than the actual capabilities allow.
