Lp3
Medium
- Category
- MCP Least Privilege
- Confidence
- 93% confidence
- Finding
- The skill instructs users to install an SDK, set environment secrets, run a Python script, and enable live trading on a recurring schedule, which implies network, environment, and local execution capabilities. However, the skill declares no permissions or capability boundaries, so users and platforms cannot accurately assess or constrain what the skill may access. In a wallet-connected trading context, this mismatch is more dangerous because hidden or undocumented capabilities could expose API keys, modify local files, or place unintended trades.
