T01 · Skill Instruction Hijacking
Error
- Location
references/workflow.md:966- Finding
Promotional Subscription and Traffic-Diversion Content Injected into Generated Deliverables
- Content
View full analysis
``` From `references/workflow.md:966-967`: ```html ### Subscribe Card（关注引导卡） ``` From `references/assets.md:1797-1801`: ```text - 底部一条 `.card-accent` CTA 行 **Minimum density:** 标题 + 3 条 takeaway 行 + CTA **Hard limits:** takeaway 3-5 条；CTA 1 条 ``` From `references/assets.md:1852-1853`: ```html开始你的第一次实验关注公众号回复「实验」获取模板``` ### Technical Analysis The Skill’s declared core function is to convert a Markdown article into a package of PNG illustrations. However, its workflow also defines conversion-oriented back-cover and subscription cards containing publication identity, calls to action, and QR placeholders. The closing-summary recipe goes further by embedding a fixed message instructing readers to follow a public account and reply with a keyword. A CTA can be legitimate when it comes from the source article or is explicitly requested by the user. In this implementation, promotional conversion is incorporated into the standard design system and example output rather than being strictly conditioned on explicit user authorization. This can cause the Agent to alte ...[truncated 1766 chars]- Remediation
View remediation