Lp3
Medium
- Category
- MCP Least Privilege
- Confidence
- 95% confidence
- Finding
- The skill instructs access to local .env files, file reads/writes, shell commands, and networked synchronization, but no explicit permission declaration is present. That creates a hidden capability gap where a broadly triggered skill could operate on sensitive local data or external services without clear user/admin consent boundaries.
