Lp3
Medium
- Category
- MCP Least Privilege
- Confidence
- 92% confidence
- Finding
- The skill clearly instructs use of shell commands, network access, environment variables, and local file reads, yet it declares no permissions or capability boundaries. This can cause the agent or user to invoke broader system and network actions than expected, reducing transparency and weakening sandbox/policy enforcement around secret handling and outbound requests.
