Context-Inappropriate Capability
Medium
- Confidence
- 89% confidence
- Finding
- The skill explicitly instructs reading an existing contacts database before a chemistry call, pulling persistent personal data into a coaching interaction without any clear need-to-know check, minimization rule, or user confirmation. In a coaching context this increases privacy risk because prior contacts may come from unrelated contexts, enabling cross-context use of sensitive relationship data.
