Lp3
Medium
- Category
- MCP Least Privilege
- Confidence
- 95% confidence
- Finding
- The skill invokes a bundled shell script but does not declare any tool restrictions or allowed-tools scope. That creates an avoidable trust gap: an agent may execute shell-capable steps without an explicit sandbox or least-privilege boundary, increasing the chance of unintended command execution or misuse if the script or surrounding instructions are modified.
