Lp3
Medium
- Category
- MCP Least Privilege
- Confidence
- 84% confidence
- Finding
- The skill documentation indicates output file creation and local caching behavior, but no explicit permissions are declared for file writes. Undeclared write capability weakens the trust boundary for users and orchestrators because the skill can modify the filesystem beyond what its manifest transparently communicates.
