Lp3
Medium
- Category
- MCP Least Privilege
- Confidence
- 94% confidence
- Finding
- The skill documents execution of a local shell script (`{baseDir}/scripts/transcribe.sh`) but does not declare corresponding permissions. This creates a trust and review gap: an agent or user may authorize the skill based on incomplete metadata, while the skill still drives shell-capable behavior that can access local files and transmit audio to a remote API.
