T09 · Insecure Skill Coding Practices
Warning
- Location
- examples/desert-glass-henderson-nv.md:3
- Finding
- Worked Example Generates Unverified Commercial, Operational, and Safety Claims## Vulnerability Details **File Location**: `examples/desert-glass-henderson-nv.md`, lines 3–16, 25, 30, 34, 69–71, 111, 130, and 190–191 **Vulnerability Type**: Insecure example output containing claims not supported by the declared inputs **Risk Level**: Medium ### Vulnerable Content The example declares the following source profile: ```markdown **Shop profile used for this example:** - Shop name: Desert Glass & Windshield - City, State: Henderson, NV - AGRSS certified: YES (cert #NV-2024-0391) - NWRA member: YES - Insurance direct billing: YES — Allstate, Progressive, State Farm, Geico, USAA, Farmers - Safelite price-match: YES - OEM glass available: YES - ADAS recalibration: IN-HOUSE STATIC + DYNAMIC (certified technician, two bays) - Promotion: "free rock chip repair with any windshield replacement — June through August" - Season: SUMMER - Mobile service: YES, 30-mile radius - Warranty: Lifetime warranty on installation workmanship - Hours: Mon–Fri 7:30AM–6PM, Sat 8AM–4PM, closed Sunday - Google reviews: 4.9★ (287 reviews) ``` The generated material subsequently introduces claims and contact details absent from that profile: ```markdown Call or book online — same-day appointments available. ``` ```markdown Desert Glass & Windshield in Henderson replaces windshields fast — most jobs done in 90 minutes. ``` ```markdown required on Toyota Safety Sense, Honda Sensing, Subaru EyeSight, and most 2018+ vehicles. ``` The SMS output also substitutes an undefined symbol for the required deductible disclosure: ```markdown Desert Glass Henderson: FREE chip repair w/ any windshield replacement thru 8/31. Most insurance: $0 out of pocket†. Call/text 702-555-0147. Reply STOP to opt out. (163 chars — trim 3) *Final:* Desert Glass HV: FREE chip w/ windshield thru 8/31. Most insurance $0†. Call 702-555-0147. Reply STOP to opt out. (117 chars ✓) ``` Additional unsupported assertions and invented identity details include: ```markdown Using your comprehensi ...[truncated 2948 chars]
- Remediation
- ## Remediation Suggestions 1. Remove every factual statement that cannot be mapped to a declared profile field. 2. Add explicit profile fields for: - Same-day appointment availability - Typical or guaranteed completion time - Supported model years and ADAS systems - Jurisdiction-specific insurance assertions - Staff contact name - Telephone number - Email address - Physical address 3. Replace invented identity and contact information with conspicuous placeholders such as `[CONTACT_NAME]`, `[PHONE]`, `[EMAIL]`, and `[ADDRESS]`. 4. Restore the complete deductible disclosure inside every SMS message containing a zero-cost claim. Do not rely on an undefined symbol or an external footnote. 5. Add a final generation rule requiring every factual claim to cite or map internally to a supplied input field. 6. Require jurisdiction-specific insurance, warranty, certification, and vehicle-safety claims to be independently verified before publication. 7. Add a prepublication checklist that rejects output containing unsupported timing, pricing, availability, certification, insurance, or safety claims. 8. Update the worked example so it demonstrates the same validation constraints imposed by the operational prompts.