Lp3
Medium
- Category
- MCP Least Privilege
- Confidence
- 92% confidence
- Finding
- The skill explicitly instructs execution of local shell commands, uses environment variables containing cloud credentials, and performs networked queries, yet no permissions are declared. This creates a transparency and policy-enforcement gap: a host may permit the skill under the assumption it is low-risk billing-only logic while it can actually execute code, access secrets indirectly, and contact external cloud APIs.
