T05 · Unauthorized Access and Privilege Escalation
Warning
- Location
``` 3. Parse and report the live URL and claim URL. **Requirements:** - `scripts/share.sh` expects a `vercel-deploy` helper script in an OpenClaw skill path (see script output if missing). **Notes:** - Deployments are public. - Keep the local file path in your response so the user can re-share later. ``` ### Technical Analysis The diff-review and project-recap workflows direct the Agent to inspect persistent files under `~/.openclaw/workspace/memory/` and mine conversation history. This collection exten ...[truncated 2624 chars]:16- Finding
Excessive Collection and Persistence of Agent Memory and Conversation History
- Content
View full analysis
` for file-level overview - `git diff --name-status --` for new/modified/deleted files (separate src from tests) - Line counts: compare key files between `` and working tree (`git show :file | wc -l` vs `wc -l`) - New public API surface: grep added lines for exported symbols, public functions, classes, interfaces (adapt the pattern to the project's language — `export`/`function`/`class`/`interface` for TS/JS, `def`/`class` for Python, `func`/`type` for Go, etc.) - Feature inventory: grep for new actions, keybindings, config fields, event types on both sides - Read all changed files in full — include surrounding code paths needed to validate behavior - Check whether `CHANGELOG.md` has an entry for these changes - Check whether `README.md` or `docs/*.md` need updates given any new or changed features - Reconstruct decision rationale: if this work was done in the current session, mine the conversation for approaches discussed, alternatives rejected, and trade-offs made. Check for progress docs (`~/.openclaw/workspace/memory/{project}/progress.md`, `memory/YYYY-MM-DD.md`, `OPEN_ITEMS.md`) or plan files that may contain reasoning. For committed changes, read commit messages and PR descriptions. ``` From `prompts/project-recap.md:14-24`: ```markdown **Data gathering phase** — run these first to understand the project: 1. **Project identity.** Read `README.md`, `CHANGELOG.md`, `package.json` / `Cargo.toml` / `pyproject.toml` / `go.mod` for name, description, version, dependencies. Read the top-l ...[truncated 5112 chars]- Remediation
View remediation