-
Notifications
You must be signed in to change notification settings - Fork 8.2k
update-sensitive-data-docs #2911
New issue
Have a question about this project? Sign up for a free GitHub account to open an issue and contact its maintainers and the community.
By clicking “Sign up for GitHub”, you agree to our terms of service and privacy statement. We’ll occasionally send you account related emails.
Already on GitHub? Sign in to your account
Conversation
Agent Task Evaluation Results: 2/3 (67%)View detailed results
Check the evaluate-tasks job for detailed task execution logs. |
'x_pass': 'your-real-password123', | ||
}, | ||
}, | ||
sensitive_data=sensitive_data, |
There was a problem hiding this comment.
Choose a reason for hiding this comment
The reason will be displayed to describe this comment to others. Learn more.
Bug: Credentials Misconfiguration Exposes Security Vulnerabilities
The sensitive_data
configuration in this example was changed from a domain-scoped dictionary to a flat dictionary of credentials. This removes the security feature of restricting credentials to specific domains, making them available to all websites the agent visits. It also likely causes runtime errors, as the API expects a domain-specific structure.
There was a problem hiding this comment.
Choose a reason for hiding this comment
The reason will be displayed to describe this comment to others. Learn more.
1 issue found across 2 files
React with 👍 or 👎 to teach cubic. You can also tag @cubic-dev-ai
to give feedback, ask questions, or re-run the review.
```bash create environment | ||
python -m venv .venv | ||
```bash create environment with python >= 3.11 | ||
python3.12 -m venv .venv |
There was a problem hiding this comment.
Choose a reason for hiding this comment
The reason will be displayed to describe this comment to others. Learn more.
Hardcoding python3.12 unnecessarily narrows supported setups; use the active Python to align with the stated ">=3.11" support and pyproject's requires-python.
Prompt for AI agents
Address the following comment on docs/quickstart.mdx at line 18:
<comment>Hardcoding python3.12 unnecessarily narrows supported setups; use the active Python to align with the stated ">=3.11" support and pyproject's requires-python.</comment>
<file context>
@@ -9,13 +9,13 @@ icon: "rocket"
-```bash create environment
-python -m venv .venv
+```bash create environment with python >= 3.11
+python3.12 -m venv .venv
</Tab>
</file context>
</details>
Auto-generated PR for: update-sensitive-data-docs
Summary by cubic
Update sensitive-data docs to show both global and domain-scoped secrets (with regex) and use a single sensitive_data variable in the Agent example. Quickstart now clarifies Python version (>=3.11, example with python3.12) and installs Playwright explicitly before installing Chromium deps.