T09 · Insecure Skill Coding Practices
Warning
- Location
- SKILL.md:47
- Finding
- Unnecessary Persistent Storage of Personal and Inferred Data## Vulnerability Details **File Location**: `SKILL.md`, lines 47–50 **Vulnerability Type**: Unprotected persistent storage of sensitive personal data **Risk Level**: Medium ### Vulnerable Code Snippet ```markdown ## Lưu ý quan trọng - **Độ chính xác:** Luôn sử dụng đúng tên và ngày sinh trên giấy tờ tùy thân. - **Nguyên tắc cốt lõi:** Tuyệt đối không áp dụng các khái niệm số Master (11, 22, 33) của Thần số học truyền thống vào đây. Hệ thống này chỉ vận hành trên 9 con số cơ bản. - **Lưu trữ:** Mọi kết quả phân tích sẽ được lưu vào thư mục tri thức `knowledge/ThanCuu/` để anh có thể tra cứu lại bất cứ lúc nào. ``` Related input guidance appears in `SKILL.md`, lines 34–41, and `references/GioiThieuThanCuu.md`, lines 80–83 and 149–152. It directs users toward names and birth dates taken from identity documents. ### Technical Analysis The Skill instructs the Agent to save every generated analysis to the persistent `knowledge/ThanCuu/` directory. These analyses are derived from legal names and dates of birth and may include relationship details and inferred personality or psychological characteristics. Persistent storage is not required to perform the stated calculation. The instruction does not require informed consent before storage and provides no data-minimization, pseudonymization, access-control, encryption, retention, expiry, or deletion requirements. Consequently, information needed only transiently can remain accessible beyond the originating session. This is classified as `T09: Insecure Skill Coding Practices` because the configuration directs plaintext persistence of sensitive personal and inferred data without appropriate safeguards. The reviewed evidence does not establish attacker-controlled instruction persistence, so it is not classified as Agent Memory Poisoning. ### Attack Path 1. A user provides a legal name and date of birth for an individual or two individuals. 2. The Agent calculates the requested indicators and generates personality o ...[truncated 1011 chars]
- Remediation
- ## Remediation Suggestions 1. Remove mandatory persistence and process names and birth dates transiently by default. 2. Ask for explicit user consent before saving any analysis, clearly identifying what data will be stored, where it will be stored, and for how long. 3. Store only the minimum necessary information. Exclude identity-document numbers, document images, addresses, and full birth dates unless strictly required. 4. Pseudonymize or redact legal identifiers from retained reports where possible. 5. Apply restrictive filesystem permissions so unrelated users, Skills, and processes cannot read the records. 6. Encrypt retained sensitive data at rest using appropriately managed keys. 7. Define automatic expiration and secure deletion procedures, and provide a user-accessible deletion mechanism. 8. Avoid instructing users to submit identity-document images; a manually entered name and birth date are sufficient for the declared function. 9. Document whether generated results may enter backups, synchronization systems, logs, or other secondary storage.