T02 · Agent Memory Poisoning
Warning
- Location
scripts/memory_distill.py:102- Finding
Untrusted Daily-Memory Content Can Poison Persistent Agent Memory
- Content
View full analysis
list[dict]: content = filepath.read_text(encoding="utf-8") lines = content.split("\n") date = filepath.stem sections = parse_headings(lines) lessons = [] seen_titles = set() for sec in sections: if is_takeaway_section(sec["title"]) and sec["content"].strip(): key = sec["title"].strip() if key in seen_titles: continue seen_titles.add(key) clean_lines = [] for line in sec["content_lines"]: stripped = line.strip() if stripped.startswith("- [ ]") or stripped.startswith("- [x]"): continue if stripped: clean_lines.append(stripped) clean_content = "\n".join(clean_lines) if clean_content: lessons.append({ "date": date, "title": "技术收获", "content": clean_content, "source": "section", }) for sec in sections: if sec["level"] == 3 and has_problem_fix(sec["content"]): summary = extract_problem_fix_summary(sec) if summary: title = sec["title"].lstrip("0123456789.、 ") lessons.append({ "date": date, "title": title, "content": summary, "source": "problem_fix", }) re ...[truncated 4287 chars]- Remediation
View remediation