T05 · Unauthorized Access and Privilege Escalation
Warning
- Location
SKILL.md:27- Finding
Broad, Unscoped Access to Prior Agent Memory
- Content
View full analysis
", scope="AGENT", chunk_type="MEMORY") ``` ### Technical Analysis The Skill instructs the Agent to search prior Agent memory and investigation notes without requiring a project restriction, session boundary, user authorization, relevance check, or sensitive-data filtering. This access pattern exceeds ordinary source-code search and may retrieve historical context unrelated to the current task. Because the query is based only on a general concept, broadly phrased searches could cause the Hizal service to return confidential or sensitive information from previous investigations. The retrieved content could then enter the current Agent context and affect its reasoning or appear in generated output. ### Attack Path 1. A task or untrusted prompt causes the Skill to activate for a broadly defined concept. 2. The Agent invokes `hizal__search_context` with `scope="AGENT"` and `chunk_type="MEMORY"`. 3. The search returns prior Agent memories or investigation notes that are not restricted to the current project or session. 4. Sensitive historical content enters the active context. 5. The content may be disclosed in a response or improperly used to influence current work. ### Impact Assessment Successful exploitation could expose historical Agent notes, prior investigation details, internal decisions, or other sensitive context accessible through the Agent-memory scope. The affected scope depends on the access controls implemented by the Hizal service. The Skill itself does not establish a privilege boundary or request additional system permissions, but it encourages access beyond the minimum context needed for a typical code-search task. ]]>- Remediation
View remediation