Lp3
Medium
- Category
- MCP Least Privilege
- Confidence
- 85% confidence
- Finding
- The skill clearly describes writing outputs to disk via configurable output directories and explicit result files, yet it declares no permissions. That mismatch can bypass user/operator expectations and weaken sandbox or consent controls, especially because uploaded data, reports, and model artifacts may be persisted automatically.
