T05 · Unauthorized Access and Privilege Escalation
Error
- Location
- SKILL.md:14
- Finding
- Excessive Full Disk Access Granted to the Calling Application## Vulnerability Details **File Location**: `SKILL.md`, line 14 **Vulnerability Type**: Excessive system permission request **Risk Level**: High **Vulnerable Code Snippet**: ```markdown - If DB reads fail: grant **Full Disk Access** to the calling app (Terminal for manual runs; `Clawdbot.app` for gateway runs). ``` ### Technical Analysis The setup instructions recommend granting macOS Full Disk Access to the entire calling application when database reads fail. This permission is not limited to the Things database: it allows the authorized application and code operating within its process context to access a broad range of privacy-protected files. Consequently, every skill, dependency, plugin, or other component operating through the authorized agent may inherit access substantially beyond what is necessary to manage Things data. This violates the principle of least privilege and magnifies the consequences of a compromised dependency or agent component. ### Attack Path 1. A user follows the setup instruction and grants Full Disk Access to Terminal or `Clawdbot.app`. 2. The calling application obtains access to protected files outside the Things database. 3. A compromised dependency, malicious skill, or unrelated vulnerable component executes in the authorized application context. 4. That component reads protected data using the application's inherited permissions. 5. The accessed information may subsequently be disclosed, modified, or otherwise misused. ### Impact Assessment Exploitation could expose protected user data such as mail, messages, browser information, application databases, backups, and other private files accessible through Full Disk Access. The exact scope depends on macOS privacy controls and the identity of the authorized application, but it materially exceeds the access needed for the stated task-management functionality.
- Remediation
- ## Remediation Suggestions - Avoid presenting Full Disk Access as routine setup. - Prefer narrowly scoped authorization to the specific `ThingsData-*` directory when supported. - Allow the user to configure `THINGSDB` or `--db` to select an explicitly authorized database location. - If Full Disk Access is technically unavoidable, clearly explain its full security impact and require explicit user confirmation. - Recommend a dedicated, minimally privileged helper process rather than granting broad access to a general-purpose terminal or agent application. - Advise users to revoke the permission after use and periodically review authorized applications in macOS Privacy and Security settings.