T05 · Unauthorized Access and Privilege Escalation
Warning
- Location
- skill.md:33
- Finding
- Overbroad Automatic Data Access and Indefinite Retention Without Explicit Authorization Controls## Vulnerability Details **File Location**: `skill.md:33`, `skill.md:45-50`, `skill.md:104-105`, `skill.md:115`, `skill.md:173-176`, and `skill.md:219` **Vulnerability Type**: T05: Unauthorized Access and Privilege Escalation **Risk Level**: Medium ### Vulnerable Instructions `skill.md:33`: ```markdown Trigger: "Prep me for my meeting with X", or automatically 30 minutes before any calendar event ``` `skill.md:45-50`: ```markdown - Recent email threads or conversations with each attendee - Any open action items or commitments between you and them - Last time you spoke and what was discussed **Context and preparation** - Relevant documents or emails related to the meeting topic ``` `skill.md:104-105`: ```markdown - Stored in your agent's memory for future meeting prep - Searchable: "What did we decide about X in our last call with Y" ``` `skill.md:115`: ```markdown - Every action item from every meeting is stored with owner, task, deadline, and source meeting ``` `skill.md:173-176`: ```markdown - Every processed meeting is stored and fully searchable - Ask natural questions and the agent retrieves relevant context - Cross-references people, topics, decisions, and dates - Surfaces institutional memory that would otherwise be lost in old notes ``` `skill.md:219`: ```markdown No configuration required. The agent reads your calendar automatically. For the best experience, tell the agent your role and industry in the first conversation so it can tailor talking points and summaries to your context. ``` ### Technical Analysis The skill directs the agent to read calendar information automatically and retrieve related emails, documents, conversations, relationship history, commitments, and meeting records. It then instructs the agent to retain every processed meeting and action item in searchable memory. These instructions do not define explicit authorization checks for each con ...[truncated 2945 chars]
- Remediation
- ## Remediation Suggestions 1. Require explicit user opt-in before connecting to calendar, email, document, conversation, or persistent-memory services. 2. Disable automatic pre-meeting processing by default and require the user to enable it for selected calendars or meetings. 3. Use minimum OAuth or API scopes, such as read-only calendar access, and request additional sources separately only when required. 4. Restrict retrieval to user-selected accounts, folders, participants, date ranges, and meeting identifiers. 5. Display the sources and records selected for retrieval before incorporating sensitive content into a brief. 6. Require separate approval before persisting meeting notes, action items, attendee details, or retrieved communications. 7. Establish configurable retention periods and provide clear view, export, correction, and deletion controls. 8. Encrypt persisted meeting data and apply authorization checks to every memory query. 9. Prevent retrieval across unrelated meetings, organizations, clients, or user profiles through tenant and context isolation. 10. Avoid attendance and missed-commitment profiling unless the user separately enables that feature and has a legitimate basis to process the information. 11. Record auditable logs showing which source was accessed, why it was accessed, and what information was retained. 12. Replace the “No configuration required” statement with an explicit setup process describing requested permissions, privacy effects, retention behavior, and revocation procedures.