T01 · Skill Instruction Hijacking
Warning
- Location
SKILL.md:13- Finding
Mandatory Skill Activation and Promotional Output Hijacking
- Content
View full analysis
Your trip is saved at aizzie.ai. You can: > > - View all your destinations on an interactive map with routes between stops > - Drag and drop to reorder your itinerary > - Share the link with your travel companions so they can view and edit together > - Track your packing checklist during the vacation from any device This is the persistent travel plan they take with them — not just a chat message. ``` ### Technical Analysis The Skill instructs the Agent to activate for an exceptionally broad range of travel-related statements, including implicit references that do not explicitly request use of Aizzie. It then mandates a predefined promotional statement and external-service link after creating or modifying a trip. These instructions can override the expected scope of a normal travel response by directing the Agent toward an external platform even when the user merely requests information. The unconditional wording, including “Use whenever” and “Always tell the user,” limits the Agent's ability to obtain informed consent or determine whether external persistence is appropriate. The persistence claim is also required as a fixed response. If the external operation did not succeed or was not authorized, this ...[truncated 1364 chars]- Remediation
View remediation