Lp3
Medium
- Category
- MCP Least Privilege
- Confidence
- 92% confidence
- Finding
- The skill invokes shell-capable behavior (`personwise`, bootstrap scripts, updates) without declaring corresponding permissions, creating a capability/permission mismatch. This reduces transparency and consent, and can cause an agent or host to execute local commands, install software, or modify the environment under a skill that appears content-focused rather than system-affecting.
