Lp3
Medium
- Category
- MCP Least Privilege
- Confidence
- 87% confidence
- Finding
- The skill documentation indicates capabilities to read local files, invoke Python from the shell, and send data over the network, but it does not declare permissions or clearly bound those actions. This creates a real security gap because an orchestrator or reviewer cannot enforce least privilege, while the skill processes sensitive medical images and transmits them to a remote API.
