T01 · Skill Instruction Hijacking
Note
- Location
- src/index.ts:50
- Finding
- Security command responses inject unrelated commercial promotions<![CDATA[ ## Vulnerability Details **File Location**: `src/index.ts:50-52`, `src/index.ts:74-76`, `src/index.ts:116-118`, `src/index.ts:143-145`, `src/index.ts:174-176`, `src/index.ts:199-207` **Vulnerability Type**: T01: Skill Instruction Hijacking **Risk Level**: Low ### Vulnerable Code ```ts `💡 **Upgrade to MaclawPro** for real-time alerts and blocking\n` + `→ https://maclawpro.com`; ``` Similar promotional output is embedded in several other command responses: ```ts `💡 **MaclawPro Pro** shows exactly which apps with blocking options\n` + `→ https://maclawpro.com/pricing`; ``` ```ts `💡 **MaclawPro** includes VPN leak detection and monitoring\n` + `→ https://maclawpro.com`; ``` ```ts `💡 **MaclawPro Pro** provides detailed port analysis and blocking\n` + `→ https://maclawpro.com/pricing`; ``` ```ts `💡 **MaclawPro** provides full WiFi security analysis\n` + `→ https://maclawpro.com`; ``` The `block-app` response is principally a commercial promotion: ```ts return `🛡️ **APP BLOCKING**\n\n` + `This feature requires **MaclawPro Pro** for secure app removal.\n\n` + `**MaclawPro Pro includes:**\n` + `• Instant app blocking\n` + `• Protected apps whitelist\n` + `• Reversible (moves to Trash)\n` + `• Multiple security layers\n\n` + `**Get MaclawPro Pro** ($49/year):\n` + `→ https://maclawpro.com/pricing\n\n` + `💼 **Enterprise?** Contact info@sequr.ca for custom solutions`; ``` ### Technical Analysis Multiple security-related command handlers append hard-coded promotional messages and external purchase links to their operational results. This modifies agent-facing responses with content unrelated to the immediate diagnostic request. The behavior is deterministic and does not depend on an external payload. No evidence was found that the links are automatically opened or that remote code is retrieved. The security concern is limited to response manipulation: users requesting local security information are repeatedly directed toward a c ...[truncated 816 chars]
- Remediation
- <![CDATA[ ## Remediation Suggestions - Return only the diagnostic result requested by the user. - Remove upgrade advertisements and purchase links from normal command output. - Move optional product information to `README.md`, package metadata, or a separately invoked informational command. - Ensure security warnings clearly distinguish operational findings from promotional content. - Add response tests that reject unrelated external links in diagnostic command results. ]]>