Lp3
Medium
- Category
- MCP Least Privilege
- Confidence
- 81% confidence
- Finding
- The skill instructs use of environment variables for API keys and performs network-backed data retrieval, but no explicit permission declaration or user-facing boundary is present. This creates a transparency and governance gap: the agent may access secrets and external services without clear least-privilege controls or consent expectations.
