Lp3
Medium
- Category
- MCP Least Privilege
- Confidence
- 92% confidence
- Finding
- The skill advertises significant capabilities—shell execution, local file access, environment access, network access, and file writes—without declaring permissions or clearly surfacing them to users. This creates a transparency and governance gap: users and hosting platforms may invoke the skill without understanding that it can execute commands, read/write local data, and exfiltrate inputs to remote services.
