Context-Inappropriate Capability
Medium
- Confidence
- 92% confidence
- Finding
- The skill includes a dedicated conversation-history feature that reconstructs and outputs prior user/agent exchanges for an app. That exceeds the minimum needed for app creation/deployment and can expose sensitive prompts, uploaded file contents, command observations, and agent actions to whoever can invoke the CLI with an app ID and token.
