Lp3
Medium
- Category
- MCP Least Privilege
- Confidence
- 93% confidence
- Finding
- The skill declares no permissions even though it requires environment variables and performs networked operations. This hides its true capability surface from reviewers and users, making it easier to access secrets and external services without clear disclosure or policy gating.
