Lp3
Medium
- Category
- MCP Least Privilege
- Confidence
- 90% confidence
- Finding
- The skill clearly directs use of file reads, file writes, and shell execution via multiple Python scripts, but it does not declare or surface those capabilities as explicit permissions. This creates a transparency and consent problem: users may invoke the skill expecting advisory orchestration, while it actually drives workspace modification and command execution.
