Description

Debug logs capture full LLM outputs including potentially sensitive data. Logs exposed to unauthorized users.

Expected Behavior

Don't log LLM outputs. Or hash/redact sensitive parts.

Actual Behavior

File: src/logging/logger.py
Logs everything: logger.debug(f"LLM output: {output}")

GSSoC Points Estimate: Level 2 (Security)

Suggested Labels

• gssoc:approved
• type:bug
• severity:high
• area:security