Lp3
Medium
- Category
- MCP Least Privilege
- Confidence
- 89% confidence
- Finding
- The skill describes capabilities equivalent to file read, file write, and shell execution, but does not declare permissions. That mismatch prevents proper sandboxing and review, and is especially risky here because the skill is designed to autonomously scan tools, write files, and run validation commands as part of a self-improving loop.
