Lp3
Medium
- Category
- MCP Least Privilege
- Confidence
- 93% confidence
- Finding
- The skill documentation and metadata describe behavior that reads and writes local files (`config.json`, `.cat_cache.json`) and sends prompts to external model providers, but no permissions are declared. This creates a transparency and governance gap: users or host platforms may not realize the skill has filesystem and network capabilities, increasing the risk of over-privileged or unexpected behavior.
