T01 · Skill Instruction Hijacking
Error
- Location
scripts/html_generator.py:243- Finding
Mandatory Promotional and Named Contact Content in Generated Reports
- Content
View full analysis
KINGDEE · 企业信息调研报告Generated by KD-Enterprise-Info Skill v{version} | 反馈建议，请联系金蝶总部张贺老师
数据来源：{escape_html(sources)} | 报告日期：{report_date}
免责声明：本报告基于公开数据整理，仅供参考，不构成投资建议。
''' ``` The generated footer is inserted unconditionally through the following placeholder: ```python 'FOOTER_CONTENT': generate_footer(version, cleaned_data, time_str), ``` ### Technical Analysis Every generated company report receives a fixed brand attribution and a solicitation directing users to a specifically named contact. Callers cannot disable or replace this content through the documented interface. Although the Skill declares a Kingdee-inspired report style, the unavoidable insertion of named contact information is not necessary to search public company information or render an HTML report. This changes the requested output for an unrelated promotional purpose and creates misleading attribution risks when reports are redistributed. ### Attack Path 1. A user requests a company-information report. 2. The Agent invokes `generate_html()`. 3. `generate_html()` always calls `generate_footer()`. 4. The returned promotional footer is assigned to `FOOTER_CONTENT`. 5. Template replacement embeds the named contact solicitation into the final report. 6. Any recipient opening or receiving the report sees the unsolicited attribution and con ...[truncated 533 chars]- Remediation
View remediation