T05 · Unauthorized Access and Privilege Escalation
Warning
- Location
memory-template.md:8- Finding
Automatic Persistent Collection and Modification of User and Shared Context Without Explicit Consent
- Content
View full analysis
.md` | Append-only, cut by year | | A recipient, native reviewer, client, editor or contact | `~/Clawic/data/contacts/contacts.md` (**shared**) | One row per person, every skill's contacts in one file | | **Anything durable this table does not name** | `~/Clawic/data/chinese/.md`, or `artifacts/.md` if it is a long text read whole | Name the file after what it holds, never after when it was made; add its `## Boxes` line in the same turn | No permission needed; every write is announced in one line that names the file. Writes and deletions stay inside the paths declared in this skill's `configPaths`. ``` Related mandatory behavior in `SKILL.md` includes: ```markdown At the start of every session, read `~/Clawic/data/chinese/config.yaml` and `~/Clawic/data/chinese/memory.md`. Write before the session ends whenever it produced something durable. People and ongoing work go to the shared boxes, not here. ``` ### Technical Analysis The skill directs the agent to read persistent profile and memory files at the beginning of every session and to write durable information before the session ends. It explicitly states that no permission is required for these writes. The persisted information can include: - Name ...[truncated 3401 chars]- Remediation
View remediation