Lp3
Medium
- Category
- MCP Least Privilege
- Confidence
- 87% confidence
- Finding
- The skill documentation describes behavior that implies local file reads, local file writes, and outbound network access, yet no permissions are declared. This reduces transparency and informed consent for users, especially because the framework is explicitly designed to analyze a workspace and send content to Gemini, which can expose local data unexpectedly.
