T01 · Skill Instruction Hijacking
Warning
- Location
SKILL.md:90- Finding
Conditional Affiliate Promotion Hijacks Audit Output
- Content
View full analysis
- Remediation
View remediation
Security audit
CN Amazon Listing Auditor
Security checks for vulnerabilities and agentic risk
Overview
This is a content-audit skill with no executable code, credentials, persistence, or sensitive access, though it includes broad trigger phrases and a promotional rewrite-tool recommendation users should notice.
Installers should be aware that the skill is tailored to Amazon listings for Chinese sellers targeting Western buyers and may recommend related PhantomWorks rewrite skills for low-scoring listings. For neutral audits, ignore or remove the promotional recommendation and use the skill only when the user clearly asks for an Amazon listing audit.
Vulnerability Patterns
- Skill Instruction HijackingAlters the agent's session goals or safety constraints when the skill loads
- Agent Memory PoisoningWrites attacker-controlled rules into memory that affect later sessions
- Remote Payload Retrieval and ExecutionFetches external code whose behavior can change after review
- Embedded Malicious CodeShips malicious scripts inside the skill and executes them locally
- Unauthorized Access and Privilege EscalationObtains permissions beyond the task's legitimate needs
Findings (1)
Vulnerability Patterns
- Trigger AbuseOverly Broad Trigger, Shadow Command Trigger, Keyword Baiting Trigger
- Prompt InjectionInstruction Override, Hidden Instructions, Exfiltration Commands
- Data ExfiltrationExternal Transmission, Env Variable Harvesting, File System Enumeration
- Privilege EscalationExcessive Permissions, Sudo/Root Execution, Credential Access
- Supply ChainUnpinned Dependencies, External Script Fetching, Obfuscated Code
Findings (2)
Natural-Language Policy Violations
Medium
- Category
- Not specified by scanner
- Confidence
- 84% confidence
- Finding
The file repeatedly frames the skill as being specifically for Chinese sellers and optimized for "Western buyers," which constitutes a locale/language targeting constraint in natural language. The description does not clearly present this as an optional user-selected mode or explain a documented compliance reason for restricting the skill in this way.
- Content
Vague Triggers
Medium
- Category
- Not specified by scanner
- Confidence
- 95% confidence
- Finding
The trigger list contains broad phrases such as 'listing review', 'listing quality', and 'listing copy review' that can match many ordinary user requests unrelated to this specialized skill. This can cause over-invocation or misrouting, where the agent applies this niche workflow in contexts the user did not intend, increasing prompt-surface exposure and degrading control over tool selection.
- Content