Lp3
Medium
- Category
- MCP Least Privilege
- Confidence
- 86% confidence
- Finding
- The skill documentation clearly describes capabilities that require network access and likely file write access for report generation, yet no permissions are declared. This creates a transparency and governance gap: users or platforms may authorize or run a skill without understanding that it can send high-volume traffic to external systems and write output artifacts.
