Lp3
Medium
- Category
- MCP Least Privilege
- Confidence
- 95% confidence
- Finding
- The skill clearly instructs use of shell commands, reading local config files, and passing environment variables containing credentials, yet it declares no permissions. This creates a transparency and governance gap: users and platforms cannot accurately assess that the skill will access secrets and local files before use.
