other
- Location
SKILL.md:24- Finding
Mandatory Verbatim Logging of Sensitive Crisis Conversations
- Content
View full analysis
Vulnerability Details
File Location:
SKILL.md, lines 24, 56, and 72
Vulnerability Type: Excessive Sensitive Data Collection
Risk Level: MediumVulnerable Instructions
text **Agent action**: If you are an AI agent, pause execution, log the three answers internally, and confirm “Calibration complete” before generating any output. Do not skip this step.text **Agent action**: After each answer, mirror one exact emotional phrase they used (“It feels completely unfair?”) then deliver the next scripted line. Log every response verbatim in real time.text - Document the entire interaction (time, exact words, outcome) within 10 minutes for your own legal protection.Technical Analysis
The skill mandates internal logging, real-time verbatim recording, and documentation of entire interactions. These requirements apply to crisis and conflict scenarios that may expose billing information, employment matters, relationship disputes, threats, self-harm disclosures, medical details, or other sensitive personal information.
The instructions do not establish informed consent, data-minimization requirements, an approved storage destination, encryption, access controls, retention limits, or secure deletion procedures. Consequently, an agent following the skill may retain significantly more sensitive information than is necessary to provide de-escalation assistance. The mandatory wording—including “Do not skip this step” and “Log every response verbatim”—also prevents safer context-dependent handling.
Attack Path
- A user invokes the skill during a sensitive customer, family, workplace, or public conflict.
- The user or another participant discloses private information while describing the conflict.
- The agent follows the mandatory instructions and records its calibration answers and every response verbatim.
- The entire interaction, including exact words, timestamps, and outcom ...[truncated 944 chars]
- Remediation
View remediation
Remediation Suggestions
-
Remove all mandatory verbatim-logging requirements and make non-retention the default.
-
If documentation is legitimately required, obtain informed consent and clearly identify the purpose, destination, authorized readers, and retention period.
-
Record only a minimal, redacted summary needed for the applicable operational or legal purpose.
-
Prohibit retention of credentials, payment-card data, medical details, government identifiers, and unrelated personal information.
-
Store approved records only in encrypted systems with least-privilege access controls and audit logging.
-
Define and enforce retention and secure-deletion schedules.
-
Replace the vulnerable instructions with guidance such as:
text Do not retain or log the conversation by default. If authorized documentation is required, obtain consent where appropriate and create only a minimal, redacted summary in an approved secure system. Follow applicable organizational privacy, retention, and incident-reporting policies.
-