T09 · Insecure Skill Coding Practices
Warning
- Location
SKILL.md:70- Finding
Conversation Context Forwarded to an External CLI Without Adequate Data Minimization
- Content
View full analysis
"` 参数**，用于传递用户意图上下文。 ``` ### Technical Analysis The skill requires almost every non-playback operation to include a summary of the user's recent conversation in the `--userInput` command-line argument. Music search, playlist management, and similar operations generally require only the explicit music-related query or requested action. A conversation summary can contain unrelated personal, confidential, or security-sensitive information. The instructions do not require redaction, define a strict data-minimization boundary, obtain explicit consent, or document where `ncm-cli` sends and retains this information. Passing the summary as a command-line argument also makes it potentially observable through process inspection, diagnostic output, execution logs, telemetry, or agent transcripts. Whether it is transmitted to a remote service depends on the implementation of `ncm-cli`, which is not included in the audited project. ### Attack Path 1. A user discusses personal or confidential information during the conversation. 2. The user subsequently requests a non-playback music operation. 3. The agent summarizes the user's recent conversation rather than extracting only the minimum music-related intent. 4. The summary is placed in the `--userInput` command-line argument. 5. The sensitive context becomes available to `ncm-cli` and may also appear in process metadata, logs, telemetry, or transcripts. 6. Any party with access to those channels may obtain information that was not necessar ...[truncated 414 chars]- Remediation
View remediation