Lp3
Medium
- Category
- MCP Least Privilege
- Confidence
- 86% confidence
- Finding
- The skill instructs use of shell commands, local file access, and network operations, but does not declare permissions or surface those capabilities explicitly. This weakens user consent and sandboxing expectations, especially because the workflow reads local credential files and performs external uploads.
