Undeclared Tool Scope
- Category
- MCP Least Privilege
- Confidence
- 92% confidence
- Finding
The skill explicitly instructs the agent to read a file, transform it, and write it back, but it declares no tool scope or allowed-tools restrictions. That mismatch can let a broadly invoked editing skill perform file modifications without clear capability boundaries, increasing the chance of unintended or over-broad file writes.
- Content
