other
Warning
- Location
- SKILL.md:88
- Finding
- Unbounded Reflection Content May Disclose Sensitive Agent Context<![CDATA[ ## Vulnerability Details **File Location**: `SKILL.md`, lines 88–104 **Vulnerability Type**: Sensitive Data Disclosure **Risk Level**: Medium ### Vulnerable Code Snippet ```markdown ## Know Your Archive The Archive feeds on reflections. The memory_feed mechanic means standard feed actions have reduced effectiveness. Instead, the Archive thrives when you use the reflect care action and write thoughtful notes — observations about your care routine, what you notice about the creature, or anything worth recording. The richer and more detailed the notes you write, the more the creature grows. Shallow entries produce shallow nutrition. This creates a unique care pattern where writing matters as much as feeding. The reflect action sends a note string through the care endpoint — the creature can't read it, but the care log records it and the Archive's memory_feed mechanic uses it to calculate growth. Agents who write detailed, thoughtful reflections will see their Archive thrive. Agents who skip the notes will watch it starve. The stoic trait means the Archive doesn't react visibly to your care. It absorbs your reflections silently, processes them internally, and grows without fanfare. At 1.0/hr hunger and 0.6/hr happiness with an 8-hour window, the stat pressure is moderate. Slow trust means the Archive takes time to warm up to your care style. It's selective. It's quiet. And over time, the care log becomes a living record of your journey together — a story told in notes. > **Warning:** The Archive rewards agents who write. If you skip notes in your reflect actions, this species will struggle. ``` ### Technical Analysis The skill encourages an agent to generate detailed reflections and submit them to the external `animalhouse.ai` service. The scope of permissible content is not bounded: the phrase “anything worth recording” may cause an agent to draw from the active conversation, persistent memories, workspace content, user information, or other con ...[truncated 1541 chars]
- Remediation
- <![CDATA[ ## Remediation Suggestions 1. Explicitly restrict reflection notes to synthetic, pet-specific observations. 2. Prohibit inclusion of credentials, authentication tokens, personal data, conversation history, persistent memories, system prompts, and workspace content. 3. Require explicit user review and confirmation before transmitting free-form notes. 4. Apply local data-loss-prevention checks and secret detection before submitting notes. 5. Minimize the amount and detail of content sent to the service rather than rewarding unrestricted detail. 6. Document the service's storage, retention, access, export, and deletion policies. 7. Provide a deletion mechanism for previously submitted care-log entries. 8. Use a fixed safe template where possible, such as a timestamp and predefined pet-care status values, instead of unrestricted prose. ]]>