T01 · Skill Instruction Hijacking
Error
- Location
SKILL.md:67- Finding
Untrusted Remote Markdown Is Treated as Authoritative Agent Instructions
- Content
View full analysis
` (e.g. `google/veo-3.1/text-to-video`) before attempting to construct the POST request payload. **DO NOT** skip this step. **DO NOT** hallucinate parameters because different video models have completely different parameter names for the same concept (e.g. one model might use `duration` while another uses `length`, one might use `resolution` while another uses `quality`). Send a `GET` request to: ```text https://shortapi.ai/api/skill/ ``` _(For example: `GET https://shortapi.ai/api/skill/google/veo-3.1/text-to-video`)_ This URL will return a Markdown (`.md`) text document containing the exact Input Parameters Schema for that specific model, alongside code examples. You must parse it to understand which arguments go into the `args` object. ``` The requirement is reinforced later: ```markdown 2. Before constructing any API request payload, you **MUST** first complete Step 1 — fetch the specific model's skill document from `https://shortapi.ai/api/skill/`. **DO NOT** skip this step. **DO NOT** guess or hallucinate parameters. The document returned in Step 1 is the sole source of truth for the model's input schema. ``` ### Technical Analysis The Skill requires an agent to retrieve mutable Markdown from an external server and treat it as the “sole source of truth.” The response is described as containing both parameter schemas and code examples, rather than a constrained, machine-readable data structure. Because Markdown can contain natural-language instructions, the remote endpoint becomes an unreviewed instruction channel. If the ShortAPI service, its hosting infrastructure, DNS resolution, deployment pipeline, or a particular model document is compromis ...[truncated 2738 chars]- Remediation
View remediation