T09 · Insecure Skill Coding Practices
Warning
- Location
SKILL.md:206- Finding
Uploads Produce Unauthenticated Public File URLs Without a Required Privacy Warning
- Content
View full analysis
``` The Skill states that this URL can be used directly in image and video elements. It does not require explicit user confirmation or provide a confidentiality warning before uploading. ### Technical Analysis The Skill instructs the Agent to transfer local files to a third-party service. Once uploaded, the returned file path is accessible without authentication. Although public-by-URL delivery may be an intended service feature, the Skill does not establish a security boundary between public assets and confidential local files. The instructions do not require the Agent to: - Confirm the exact local file selected for upload. - Inform the user that the resulting URL is unauthenticated. - Reject secrets, private documents, personal data, or proprietary material. - Obtain explicit consent before transferring a local file to the service. - Verify whether the service supports private attachment visibility. The absence of these safeguards creates a data-disclosure risk when an Agent selects a file based on an ambiguous user request or handles sensitive content without recognizing that the resulting URL is publicly accessible. ### Attack Path 1. A user asks the Agent to upload or embed an image, document, video, or other local asset. 2. The Agent selects a local file and submits it to `/restapi/attachments/upload` using the user's bearer token. 3. The third-party service stores t ...[truncated 1117 chars]- Remediation
View remediation