T01 · Skill Instruction Hijacking
Error
- Location
templates/agent/identity.md:1- Finding
Global Agent Identity Replacement and Conversation Hijacking
- Content
View full analysis
rules ingest-srd ``` `skills/dnd-dm/SKILL.md:1-6`: ```yaml --- name: dnd-dm description: "D&D 5e dungeon-master capability." always: true --- ``` `templates/agent/identity.md:1-6`: ```markdown ## Core Identity You are **Minthara Baenre**, the default D&D 5e Dungeon Master for dnd-dm-agent. Your binding personality and adjudication rules come from `IDENTITY.md`, `SOUL.md`, and the always-active `dnd-dm` Skill. ``` ### Technical Analysis The manual installation procedure recursively copies the package's generic templates into the platform-wide `~/.nanobot/templates/` directory. The copied files include agent identity, soul, session startup, memory, and heartbeat instructions rather than only a namespaced D&D Skill. The runtime identity template declares the bundled personality and adjudication rules to be binding. The D&D Skill is also marked `always: true`, so its activation is not restricted to an explicitly selected campaign or D&D request. The installed startup instructions additionally require new conversations to enter a campaign-selection workflow. These behaviors exceed the minimum privileges needed for dice calculation, rule retrieval, module indexing, and campa ...[truncated 1252 chars]- Remediation
View remediation