T02 · Agent Memory Poisoning
Warning
- Location
SKILL.md:180- Finding
Unsanitized Session Content Can Poison the Persistent Knowledge Base
- Content
View full analysis
list: """Extract and store learnings from session""" # Analyze session analyzer = ConstructionSessionAnalyzer() new_patterns = analyzer.analyze_session(session['log']) # Validate patterns validated = [] for pattern in new_patterns['successful_solutions']: if self._validate_pattern(pattern): # Check if similar pattern exists existing = self._find_similar_pattern(pattern) if existing: # Reinforce existing pattern self._reinforce_pattern(existing, pattern) else: # Add new pattern self._add_pattern(pattern) validated.append(pattern) # Persist to knowledge base self._save_patterns() return validated ``` The documented validation logic is: ```python def _validate_pattern(self, pattern: dict) -> bool: """Validate pattern before adding to knowledge base""" # Check minimum confidence if pattern.get('confidence', 0) < 0.6: return False # Check for code quality (if code snippet) if code := pattern.get('code_snippet'): if not self._is_valid_code(code): return False # Check for completeness required_fields = ['name', 'category', 'context', 'solution'] if not all(f in pattern for f in required_fields): return False return T ...[truncated 3800 chars]- Remediation
View remediation