AI Agent Privacy Notice

[Dinzeyi2]

Secure your agents at: CodeAstra.dev

AI Agent Privacy Risk

This PR adds a short README notice about a possible privacy pattern found in this project.

The concern is not an API key leak. The concern is that sensitive user, customer, or patient data may be passed directly into an AI agent / LLM context.

When this happens, the agent may see data it does not need to know in order to complete the task.

Safer pattern:

John Smith -> [CVT:NAME:user_name]
john@email.com -> [CVT:EMAIL:user_email]
04/12/1988 -> [CVT:DOB:user_dob]

The agent can still reason and perform the workflow, while the real values stay protected and are only re-injected during approved execution.

File scanned: llm.py

Findings:

[
  {
    "pattern": "unprotected_ai_context",
    "evidence": "client.chat.completions.create(model='qwen-plus', messages=[{'role': 'system', 'content': '\u4f60\u662f\u4e00\u4e2a\u77e5\u8bc6\u52a9\u624b\uff0c\u5c3d\u91cf\u4ee5\u7b80\u77ed\u3001\u53e3\u8bed\u5316\u7684\u65b9\u5f0f\u8f93\u51fa'}, {'role': 'user', 'content': message}], stream=true, stream_options={'include_usage': true})"
  }
]

Please review before merging. If this is not applicable, feel free to close this PR.

Secure your agents at: CodeAstra.dev