Lp3
Medium
- Category
- MCP Least Privilege
- Confidence
- 91% confidence
- Finding
- The skill documents CLI operations that read local inputs and write multiple output files, but it does not declare corresponding permissions or scope. Undeclared file access weakens user and platform trust boundaries because an agent may perform filesystem operations the manifest does not transparently disclose.
