Lp3
Medium
- Category
- MCP Least Privilege
- Confidence
- 95% confidence
- Finding
- The skill clearly instructs reading prior session content, invoking a masking script on transcript text, and saving generated artifacts under the user's skills directory, but it does not declare corresponding read/write permissions. This creates hidden capability expansion: operators may believe the skill is metadata-only while it can access conversation-derived content and persist files to disk.
