Severity
Medium
Problem
The plugin stores the latest user prompt gist, absolute workspace path, branch, commit, hostname, and session ID in ~/.local/share/breadcrumb/state.json. File mode 0600 protects local users, but the probe deliberately reads this data through every configured SSH account and displays it in the picker.
Impact
Prompts may contain secrets, proprietary details, customer data, or incident context. The current 200-character cap limits volume but does not prevent sensitive disclosure.
Location
plugin/breadcrumb.ts:421-426shared/state.ts:37-44probe/crumb.ts:177-183
Proposed fix
Document the data exposure clearly and add a configuration to disable prompt capture or redact sensitive values. Consider minimizing stored metadata.
Severity
Medium
Problem
The plugin stores the latest user prompt gist, absolute workspace path, branch, commit, hostname, and session ID in
~/.local/share/breadcrumb/state.json. File mode0600protects local users, but the probe deliberately reads this data through every configured SSH account and displays it in the picker.Impact
Prompts may contain secrets, proprietary details, customer data, or incident context. The current 200-character cap limits volume but does not prevent sensitive disclosure.
Location
plugin/breadcrumb.ts:421-426shared/state.ts:37-44probe/crumb.ts:177-183Proposed fix
Document the data exposure clearly and add a configuration to disable prompt capture or redact sensitive values. Consider minimizing stored metadata.