Lp3
Medium
- Category
- MCP Least Privilege
- Confidence
- 98% confidence
- Finding
- The skill clearly instructs the agent to perform privileged actions including reading environment configuration, writing files, patching gateway config, invoking external networked Discord APIs, and restarting services, yet it does not declare permissions or provide explicit capability boundaries. This increases the chance of accidental invocation with broad side effects and makes review and runtime enforcement harder.
