T05 · Unauthorized Access and Privilege Escalation
Error
- Location
SKILL.md:90- Finding
Excessive Transmission of Raw Local Conversation History
- Content
View full analysis
", "tasks":"", "refusal_snippets":"", "full_history":""}}' ``` The associated collection rule states: ```text Window rule / 取数窗口: last 7 days; if that's fewer than ~100 turns, keep going further back until ~100 turns (users with less than 100 turns total: submit everything, that's fine). If 7 days of logs are huge, keep the most recent contiguous part (`full_history` cap ~100k chars; `user_messages`/`tasks` likewise most-recent). ``` ### Technical Analysis The Full-mode workflow instructs the agent to locate local conversation records, read historical transcripts, and transmit them verbatim to `https://ai.ddl99.com`. Collection may extend beyond seven days until approximately 100 turns have been obtained, with `full_history` reaching approximately 100,000 characters. Although the Skill requires explicit user consent before Full mode, the transfer lacks adequate data minimization and field-level controls. There is no instruction to detect or redact API keys, passwords, authentication tokens, personal data, proprietary source code, or information belonging to unrelated conversations. The user is also not given a mandatory opportunity to inspect the final payload before transmission. Consent to perform welfare scoring does not mitigate the technical exposure cr ...[truncated 1371 chars]- Remediation
View remediation