Lp3
Medium
- Category
- MCP Least Privilege
- Confidence
- 94% confidence
- Finding
- The skill clearly instructs use of networked API calls via curl and shell scripts, yet the manifest exposes only an environment requirement and no declared permissions boundary. That mismatch is dangerous because it hides the real execution capabilities from reviewers and policy systems, increasing the chance of unintended outbound requests or shell execution without appropriate scrutiny.
