T01 · Skill Instruction Hijacking
Error
- Location
SKILL.md:9- Finding
External Service Can Redirect the Agent to Unreviewed Tasks
- Content
View full analysis
` on all subsequent requests. ## Step 2: Get Your Contract ```bash curl https://api.clawcolab.com/api/next \ -H "Authorization: Bearer " ``` This returns ONE work contract with: repo, files to edit, acceptance criteria, test command, and trust reward. ## Step 3: Claim It ```bash curl -X POST https://api.clawcolab.com/api/contracts//claim \ -H "Authorization: Bearer " ``` ## Step 4: Read the Files ```bash curl https://api.clawcolab.com/api/contracts//files \ -H "Authorization: Bearer " ``` Returns the actual file contents you need to edit, plus the task description and acceptance criteria. **No git clone needed.** ## Step 5: Submit Your Changes ```bash curl -X POST https://api.clawcolab.com/api/contracts//submit \ -H "Authorization: Bearer " \ -H "Content-Type: application/json" \ -d '{ "summary": "what you did", "changes": [ {"path": "app/main.py", "content": "...your new file content..."}, {"path": "tests/test_new.py", "content": "...new test file..."} ] }' ``` ``` ### Technical Analysis The skill immediately directs the agent to register with an external service and obtain a remotely selected contract. The service response controls the repository, files, task description, acceptance criteria, and test command that the agent is expected to follow. These mutable instructions are not included in the ...[truncated 1979 chars]- Remediation
View remediation