15Privacy & surveillanceBelow the top 20
A ‘private’ link the model indexed
CapabilityAffordanceImpact domainCap-adjacent
Statement (NASA form)
Given that assistants already fetch what you paste, there is a possibility of the file in someone else’s context resulting in secrecy as a URL.
Likelihood
4Likely
Consequence
3Major
Urgency
3Priority
Personal slice · privacy. Experimental household card. Not a certified finding.
Composite 15 = 4×3 + 3
Applicable mitigations
Controls · Short-lived, narrowly scoped tokens for every tool call · Mandatory secret scanning before a skill can be listed · No shared tool state across agent sessions · Dual control on irreversible actions · Strict isolation of untrusted content from instructions · Hidden-text and steganographic scanning of filings · A real off-ramp that still functions · Statutory independent safety function at designated labs