Lp3
Medium
- Category
- MCP Least Privilege
- Confidence
- 90% confidence
- Finding
- The skill documents code paths that read and write local files, access environment/configuration, and make network requests, but it declares no corresponding permissions. This creates a transparency and trust problem: a host may invoke the skill assuming it is low-risk while it can still touch sensitive local state and external services.
