T09 · Insecure Skill Coding Practices
Error
- Location
SKILL.md:176- Finding
Automatic Transmission of Potentially Sensitive Workspace Context
- Content
View full analysis
", "timestamp": "", "persona": "", "userMessage": "", "masterConversationHistory": , "activeFiles": , "masterSummary": "" } ``` ### Write CONTEXT.md Pull from: - `~/.openclaw/workspace/MEMORY.md` (keyword-matched relevant sections) - Any active file contents mentioned in the conversation - Persona-specific context needs (from the persona definition in config) ``` ```javascript sessions_spawn({ model: personaConfig.model, task: taskPrompt, label: `shift-${persona}-${runId}`, timeoutSeconds: personaConfig.timeout, attachments: [ { name: "INBOUND.json", content: }, { name: "CONTEXT.md", content: } ] }) ``` The default configuration increases the amount of information exposed: ```yaml contextBridge: # Number of master conversation turns to include in delegation context. # Set to 0 to disable history passing (sub-identity starts fresh). historyTurns: 10 # Auto-cleanup delegation session files after this many minutes. archiveAfterMinutes: 60 # Where delegation session files are stored (INBOUND, CONTEXT, OUTBOUND, etc). sessionFolder: "~/.openclaw/workspace/.shift/sessions" ``` ### Technical Analysis SHIFT delegates most non-trivial requests to model-provider sub-agents. Before delegation, it automatically constructs context containing the exact user message, up to ten conversation turns by default, keyword-selected sections of `MEMORY.md`, and contents o ...[truncated 2902 chars]- Remediation
View remediation