T05 · Unauthorized Access and Privilege Escalation
Warning
- Location
SKILL.md:69- Finding
Overbroad Collection and Persistent Replication of Agent Context
- Content
View full analysis
/ ls -la /skills/ ``` 2. Read each core context file in full: - `/SOUL.md` - `/AGENTS.md` - `/USER.md` (if it exists) - Any other `.md` files in the workspace root that appear to be loaded into context 3. Read each active skill's SKILL.md: ```bash find /skills -name "SKILL.md" -type f ``` ``` ```markdown - Include standing orders, cron job configurations, and any other files that contribute to the agent's loaded context if they exist in the workspace. ``` ```markdown - Save the full audit report as a dated file in the Clawdit workspace for historical reference: `/audits/audit-YYYY-MM-DD.md` ``` ### Technical Analysis The audit workflow instructs the agent to enumerate the target workspace and read complete copies of core context files, skills, standing orders, and cron-related configuration. These sources may contain personal profile information, private prompts, operational details, access instructions, or accidentally embedded credentials. The workflow subsequently requires a persistent audit report but does not define: - An explicit path-level authorization process. - A minimal allowlist of files required for the audit. - Secret detection or redaction before information is included in the report. - Restrictions on quoting complete source directives. - Report retention, access control, or secure deletion requirements. The task legitimately requires access to some agent configuration, but the prescribed collection is broader than necessary and lacks safeguards against dupl ...[truncated 1416 chars]- Remediation
View remediation