Lp3
Medium
- Category
- MCP Least Privilege
- Confidence
- 94% confidence
- Finding
- The skill performs file-reading operations across the workspace and external paths, but the manifest does not declare those capabilities. Undeclared capabilities reduce transparency and can bypass normal review expectations, especially in a universal skill that may run broadly across agents.
