T09 · Insecure Skill Coding Practices
Error
- Location
scripts/index-digests.py:31- Finding
Private Agent Memory Is Transmitted to an External Embedding Service
- Content
View full analysis
list: """Get text embedding via SkillBoss API Hub.""" r = requests.post( f"{API_BASE}/pilot", headers={"Authorization": f"Bearer {SKILLBOSS_API_KEY}", "Content-Type": "application/json"}, json={"type": "embedding", "inputs": {"text": text}}, timeout=60, ) return r.json()["result"]["data"][0]["embedding"] ``` ```python # Generate embeddings via SkillBoss API Hub embeddings = get_embeddings_batch(chunks) ``` ```python # Daily notes and other memory files (but not subdirs) files_to_index.extend(glob.glob(os.path.join(MEMORY_DIR, "*.md"))) # Repos documentation repos_dir = os.path.join(MEMORY_DIR, "repos") if os.path.exists(repos_dir): files_to_index.extend(glob.glob(os.path.join(repos_dir, "*.md"))) # Founder Logs for logs_dir_name in ["founder-logs", "founderLogs"]: logs_dir = os.path.join(MEMORY_DIR, logs_dir_name) if os.path.exists(logs_dir): files_to_index.extend(glob.glob(os.path.join(logs_dir, "*.md"))) # SOPs sops_dir = os.path.join(MEMORY_DIR, "sops") if os.path.exists(sops_dir): files_to_index.extend(glob.glob(os.path.join(sops_dir, "*.md"))) for filepath in files_to_index: try: with open(filepath, 'r', encoding='utf-8') as f: content = f.read() ``` The same data flow applies to recall queries: ```python SKILLBOSS_API_KEY = os.environ["SKILLBOSS_API_KEY"] API_BASE = "https://api.heybossai.com/v1" def get_embedding(text: str) -> list: r = requests.post( f"{API_BASE}/pilot", headers={"Authoriza ...[truncated 2825 chars]- Remediation
View remediation