Lp3
Medium
- Category
- MCP Least Privilege
- Confidence
- 93% confidence
- Finding
- The skill invokes shell-capable behavior, including installation/bootstrap and CLI execution, but does not declare permissions accordingly. This creates a transparency and governance gap: a host or reviewer may authorize a content-generation skill without realizing it can execute local commands and modify the environment.
