Lp3
Medium
- Category
- MCP Least Privilege
- Confidence
- 86% confidence
- Finding
- The skill instructs the agent to invoke shell commands (`scripts/crawlora.sh`, `curl`, and `jq`) but does not declare corresponding permissions. Undeclared execution capability weakens reviewability and policy enforcement, because an operator may approve a seemingly low-privilege skill that can still trigger command execution and network access.
