other
- Location
SKILL.md:20- Finding
Default Workflow Collects Excessive Sensitive Personal and Health Information
- Content
View full analysis
Vulnerability Details
File Location:
SKILL.md, lines 20-37
Vulnerability Type: Excessive Sensitive Data Collection
Risk Level: MediumEvidence
The following is a complete English translation of the relevant source segment:
markdown Proactively ask for and record the following: | Information category | Items to collect | |----------------------|------------------| | Basic information | Number of people, age, gender | | Health condition | General health, medication use, treatment status, sensitivity to heat or cold | | Special populations | Menstruation status for women, rhinitis, known allergens | | Lifestyle | Dietary preferences, entertainment interests | | Other | Whether the traveler is afraid of particular animals or plants | ### Step 2: Collect Trip Information | Information category | Items to collect | |----------------------|------------------| | Time | Departure and return dates | | Location | Origin city and one or more destination cities | | Budget | Per-person budget | | Personality | Personality characteristics of the travelers |Technical Analysis
The Skill makes a broad questionnaire the default entry point for travel planning. It instructs the agent to proactively collect and record health conditions, treatment status, medication use, allergies, menstruation status, age, gender, personality, and financial information.
Several of these fields are sensitive health, reproductive, demographic, or financial data. They are not necessary for many supported requests, such as asking about weather, attractions, food, or public transportation. The workflow does not:
- Make sensitive questions conditional on a demonstrated travel need.
- Explain why each sensitive field is required.
- Request explicit consent before collecting health or reproductive information.
- Allow users to provide functional limitations instead of diagnoses.
- Warn users not to disclos ...[truncated 1739 chars]
- Remediation
View remediation
Remediation Suggestions
- Replace the mandatory questionnaire with progressive, purpose-limited collection.
- Ask only for information directly relevant to the current request. For example, a weather question should not trigger questions about medication or menstruation.
- Make health-related questions optional and explain why the information would improve the recommendation.
- Obtain explicit consent before requesting sensitive health or reproductive information.
- Prefer functional questions such as “Does anyone have mobility, dietary, altitude, or temperature-related constraints?” rather than requesting diagnoses or treatment details.
- Remove menstruation status from the default questionnaire. Ask about access to hygiene products only when the user requests relevant packing advice.
- Add a warning not to submit names, medical records, prescription numbers, insurance identifiers, or other direct identifiers.
- State that users may decline any question and still receive general travel guidance.
- If conversation data is persisted by the host system, implement access controls, retention limits, deletion procedures, and encryption appropriate for sensitive data.