Skip to content

Enhance privacy and security by adding permission checks and improvin… #167

New issue

Have a question about this project? Sign up for a free GitHub account to open an issue and contact its maintainers and the community.

By clicking “Sign up for GitHub”, you agree to our terms of service and privacy statement. We’ll occasionally send you account related emails.

Already on GitHub? Sign in to your account

Open
wants to merge 1 commit into
base: main
Choose a base branch
from

Conversation

nnamon
Copy link

@nnamon nnamon commented Jun 1, 2025

…g your awareness.

This commit introduces several changes to improve data privacy and security:

  1. Sourcegraph Tool Permission: I added a permission check to the Sourcegraph tool. You will now be prompted before any search query is sent to the Sourcegraph API, preventing inadvertent leakage of sensitive data that might be included in an LLM-generated query.

  2. File View/Search Permissions: I added permission checks when viewing or searching file contents. You will be prompted before I read or search file contents, providing an explicit layer of consent.

  3. README Updates for Your Awareness:

    • I added a section on "Local Data Storage and Privacy" to inform you
      that conversation history and file contents are stored locally in an
      unencrypted SQLite database, explaining the location and risks.
    • I added a note on "Automatic Context Files" to make you aware that
      certain files in your project root might be automatically sent to LLMs.
    • I added a "Tool Usage and Permissions" security note emphasizing the
      importance of reviewing permission prompts for powerful actions like
      running commands and fetching web content, and the risks of auto-approving sessions.

These changes aim to give you more control over your data and make you more aware of the application's interactions with your file system and external services.

…g your awareness.

This commit introduces several changes to improve data privacy and security:

1.  **Sourcegraph Tool Permission:** I added a permission check to the Sourcegraph tool.
    You will now be prompted before any search query is sent to the
    Sourcegraph API, preventing inadvertent leakage of sensitive data that
    might be included in an LLM-generated query.

2.  **File View/Search Permissions:** I added permission checks when viewing or searching
    file contents. You will be prompted before I read or search
    file contents, providing an explicit layer of consent.

3.  **README Updates for Your Awareness:**
    *   I added a section on "Local Data Storage and Privacy" to inform you
        that conversation history and file contents are stored locally in an
        unencrypted SQLite database, explaining the location and risks.
    *   I added a note on "Automatic Context Files" to make you aware that
        certain files in your project root might be automatically sent to LLMs.
    *   I added a "Tool Usage and Permissions" security note emphasizing the
        importance of reviewing permission prompts for powerful actions like
        running commands and fetching web content, and the risks of auto-approving sessions.

These changes aim to give you more control over your data and make you more aware of the application's interactions with your file system and external services.
Sign up for free to join this conversation on GitHub. Already have an account? Sign in to comment
Labels
None yet
Projects
None yet
Development

Successfully merging this pull request may close these issues.

1 participant