Lp3
Medium
- Category
- MCP Least Privilege
- Confidence
- 86% confidence
- Finding
- The skill invokes a shell script (`scripts/crawlora.sh`) but does not declare any tool restrictions or allowed tool scope. That creates an unnecessary trust gap: an agent/runtime may permit broader command execution than is actually needed, increasing the chance of misuse, unsafe composition with other tools, or accidental execution outside the intended API-wrapper behavior.
