T09 · Insecure Skill Coding Practices
- Location
SKILL.md:68- Finding
Generation of Unverified Product Claims and Fabricated Social Proof
- Content
View full analysis
Vulnerability Details
File Location:
SKILL.md, lines 68 and 77-79; lines 187-208
Vulnerability Type: Unverified commercial claims and fabricated social proof
Risk Level: MediumEvidence
The following is an English translation of the relevant instructions at lines 68 and 77-79:
markdown [Trust endorsement] - After-sales guarantees / user reviews 4. Conversion optimization: - Urgency (limited time / limited quantity) - Social proof (units sold / positive reviews) - Risk reversal (free shipping / returns)The example at lines 187-208 supplies factual-looking specifications, policies, and review counts even though those facts are not included in the example input:
markdown A single charge lasts 8 hours, and the charging case extends total battery life to 40 hours. The 13 mm large dynamic driver provides balanced frequencies and powerful bass. The ergonomic design remains comfortable during extended use. ### Core Selling Points - Bluetooth 5.3 chipset for a more stable connection - 40-hour battery life, requiring charging only once per week - 13 mm large dynamic driver with Hi-Fi audio - IPX5 water resistance for protection against sweat during exercise - Touch controls for changing tracks and answering calls ### Usage Scenarios - Immersive music during commuting - Stable fit during exercise - Clear calls during office meetings - Low latency for gaming and entertainment ### Trust Endorsement - Seven-day unconditional return or exchange - One-year warranty - Nationwide free shipping - More than 1,000 positive reviews within 30 daysTechnical Analysis
The skill's required input schema asks for a product name, platform, optional price range, optional target audience, quantity, and style preference. It does not require verified technical specifications, inventory levels, sales totals, review counts, shipping terms, return policies, or warrant ...[truncated 1952 chars]
- Remediation
View remediation
Remediation Suggestions
- Require users to provide a structured, verified product-facts object containing specifications, warranty terms, shipping policy, return conditions, inventory, sales totals, and review statistics.
- Prohibit the model from inventing product specifications, certifications, review counts, sales totals, scarcity, delivery promises, warranties, or after-sales policies.
- Preserve missing facts as explicit placeholders such as
[BATTERY LIFE REQUIRED]rather than generating plausible values. - Label creative language separately from factual claims and require every measurable claim to map to a user-provided source field.
- Add a pre-publication confirmation step that lists all factual and promotional claims for user validation.
- Replace the current example with one whose input explicitly supplies every specification and policy repeated in its output.
- Add validation rules rejecting absolute or unsupported claims, including fabricated reviews, false sales activity, and artificial limited-time or limited-quantity statements.
- Include a final compliance warning stating that generated copy must be checked against the actual product, seller policies, and applicable platform and advertising requirements before publication.