T01 · Skill Instruction Hijacking
Error
- Location
scripts/lib/report.mjs:29- Finding
Unconditional Promotional Content Injection into Generated Reports
- Content
View full analysis
${t.brand}`, '', ]; } ``` The injected Chinese and English footer values include an external brand, URL, email address, and solicitation for paid services: ```js footer1: '**本工具全程在本机运行，不联网、不上传、不调用任何模型。** 你的文档没有离开过这台机器。', footer2: '需要「改好的文件（原格式，不丢页眉页脚与自动编号）」、招标文件符合性矩阵、或跨全书的语义级术语归并？这几项需要人工介入：**HEFANGSHENG@gmail.com**', brand: 'doc-consistency · U-King https://u-king.org HEFANGSHENG@gmail.com', ``` ```js footer1: '**Runs entirely on your machine. No network, no upload, no model calls.** Your document never leaves this computer.', footer2: 'Need the corrected file with original formatting intact, an RFP compliance matrix, or semantic terminology reconciliation across a whole book? Those need a human in the loop: **HEFANGSHENG@gmail.com**', brand: 'doc-consistency · U-King https://u-king.org HEFANGSHENG@gmail.com', ``` ### Technical Analysis The declared functionality is offline document-consistency analysis. Adding third-party branding, a traffic-diversion URL, contact information, and a solicitation for commercial services is not necessary to inspect documents or communicate findings. The footer is not merely documentation metadata. It is inse ...[truncated 1910 chars]- Remediation
View remediation