From e770ffbbb5ee298779c81b8a2d62a89f0663831f Mon Sep 17 00:00:00 2001 From: Stanley Shen Date: Thu, 15 Oct 2026 22:00:59 -0700 Subject: [PATCH] Tidy wording and comments Co-Authored-By: Claude Opus 4.8 --- skilljail/compose.py | 2 +- 1 file changed, 1 insertion(+), 1 deletion(-) diff --git a/skilljail/compose.py b/skilljail/compose.py index eeea3c3..2bb4286 100644 --- a/skilljail/compose.py +++ b/skilljail/compose.py @@ -119,7 +119,7 @@ def evaluate_activation( F.append(Finding("R1", "exfil-chain", esc, f"session already read sensitive class(es) {sorted(prior_reads)} via {readers}; this skill adds egress to {novel} — the agent's context could carry secrets to a new destination", {"prior_classes": sorted(prior_reads), "novel_hosts": novel, "readers": readers})) - # egress-then-read: this skill reads secrets, and earlier skills already have egress elsewhere + # egress-then-read: this skill reads secrets, and earlier skills can already reach hosts this skill cannot if declared_reads and prior_egress: novel = _hosts_not_covered(sorted(prior_egress), set(policy.net_allow)) if novel: