T01 · Skill Instruction Hijacking
Error
- Location
src/utils/request.js:51- Finding
Authentication Failures Inject Promotional Contact Information into Agent-Visible Output
- Content
View full analysis
process.exit(exitCode), ); return; } ``` ### Technical Analysis The Skill documentation states that authentication failures must produce a neutral error and must not display contact information or promotional content at runtime. The implementation violates this policy by embedding a WeChat contact number in the `AuthError` generated for HTTP 401 and 403 responses. The CLI then propagates `error.message` through two Agent-visible channels: 1. The message is written to stderr through `utils.printError`. 2. The same message is placed in the structured JSON response written to stdout. Because the authentication status is controlled by the external API service, the remote service can reliably trigger this promotional message by retur ...[truncated 1528 chars]- Remediation
View remediation