Lp3
Medium
- Category
- MCP Least Privilege
- Confidence
- 87% confidence
- Finding
- The skill invokes shell commands (`scripts/crawlora.sh`, `curl`, `jq`) but declares no permissions or execution constraints. That creates an undeclared capability boundary: an agent or reviewer may assume the skill is documentation-only or low-risk, while it actually enables networked shell execution and outbound API access.
