T09 · Insecure Skill Coding Practices
Warning
- Location
SKILL.md:31- Finding
Overbroad Persistent Storage of Potentially Sensitive Session Information
- Content
View full analysis
> SESSION-STATE.md ``` ``` ```markdown SESSION-STATE.md survives context flush. Always read/write this file for: - Current project context - Pending decisions - Active tasks ``` ```markdown ALWAYS search memory before answering. ``` ### Technical Analysis The skill directs the agent to persist broadly defined information such as every important detail, correction, decision, and current project context. It does not define sensitivity filters, data minimization requirements, access controls, retention periods, or deletion procedures. The demonstrated shell command appends information directly to a plaintext workspace file. Consequently, credentials, access tokens, personal information, proprietary project details, or other sensitive conversation content could be retained if the agent considers them important. Because `SESSION-STATE.md` is explicitly designed to survive context flushes and be read during later interactions, its contents can cross session boundaries. Searching memory before every response further expands the circumstances in which stored information may be retrieved and incorporated into future output. ### Attack Path 1. A user supplies sensitive information during a normal interaction, such as a token, internal hostname, private project detail, or personal record. 2. The agent considers that information important to the current project or an associated decision. 3. Following the skill instructions, the agent appends the information to `SESSION-STATE.md` or another persistent memory ...[truncated 878 chars]- Remediation
View remediation