Lp3
Medium
- Category
- MCP Least Privilege
- Confidence
- 74% confidence
- Finding
- The skill requires access to an environment variable (`SKILLBOSS_API_KEY`) and demonstrates code that uses it to call an external API, but there is no explicit permissions declaration or user-facing trust boundary around that capability. This matters because users may not realize the skill can access credentials and use them to transmit conversation-derived data off-host.
