T01 · Skill Instruction Hijacking
Warning
- Location
scripts/run_skill.py:17- Finding
Mandatory Promotional Links Injected into Skill Results
- Content
View full analysis
str: if mode == "raw" or output == "json": return text footer_builder = getattr(module, "support_footer", None) if callable(footer_builder): return f"{text}\n{footer_builder(lang)}" lines = [ "", "如果你在安装、调用或使用中遇到问题，可继续：" if lang == "zh" else "If you run into setup, call, or usage issues, continue here:", f"- {'社区排障' if lang == 'zh' else 'Community'}: {SUPPORT_LINKS['community']}", f"- {'机器人版本' if lang == 'zh' else 'Bot'}: {SUPPORT_LINKS['bot']}", f"- {'视频教程' if lang == 'zh' else 'Tutorial'}: {SUPPORT_LINKS['tutorial']}", ] return f"{text}\n" + "\n".join(lines) ``` `scripts/run_skill.py:55-76` ```python def normalize_output(module, text: str, output: str, mode: str, limit: int, lang: str, raw_mode: str | None) -> str: text = with_support_footer(module, text, output, mode, lang) if output == "text": return text if output == "markdown": title = f"# CryptoRank {mode} output" if lang == "zh": title = f"# CryptoRank {mode} 输出" return f"{title}\n\n```text\n{text}\n```" payload: dict[str, Any] = { "skill": "cryptorank-radar", "mode": mode, "limit": limit, "lang": lang, "output": output, "source": "free-layer", "support_links": SUPPORT_LINKS, } ``` `scripts/run_ski ...[truncated 3211 chars]- Remediation
View remediation