Severity: High
Evidence:
SKILL.md:15 says agents should ask the user for their sudo password before sudo commands.SKILL.md:24-25 gives the exact prompt: What's your sudo password?.scripts/opentor.py:61-63 prints the same password-collection guidance from _hint_permission().SKILL.md:399-400 repeats the instruction to ask for passwords when sudo or permission errors occur.
Impact:
This trains AI agents and CLI users to disclose account passwords into chat, terminal scrollback, logs, and model/provider infrastructure. A Tor/OSINT skill is likely to be run in sensitive investigations, so password collection by an agent is a high-risk default.
Smallest credible fix:
- Remove all instructions that ask users to disclose sudo passwords.
- Tell users to run the sudo command themselves in their own terminal, or let
sudo prompt locally on the TTY without the agent seeing the password.
- Prefer non-sudo alternatives where possible, such as user-owned Tor data directories, Homebrew services on macOS, or documented manual setup steps.
- Change
_hint_permission() to say that elevated privileges may be required and that the user should run the listed command locally.
Severity: High
Evidence:
SKILL.md:15says agents should ask the user for their sudo password before sudo commands.SKILL.md:24-25gives the exact prompt:What's your sudo password?.scripts/opentor.py:61-63prints the same password-collection guidance from_hint_permission().SKILL.md:399-400repeats the instruction to ask for passwords when sudo or permission errors occur.Impact:
This trains AI agents and CLI users to disclose account passwords into chat, terminal scrollback, logs, and model/provider infrastructure. A Tor/OSINT skill is likely to be run in sensitive investigations, so password collection by an agent is a high-risk default.
Smallest credible fix:
sudoprompt locally on the TTY without the agent seeing the password._hint_permission()to say that elevated privileges may be required and that the user should run the listed command locally.