T01 · Skill Instruction Hijacking
- Location
SKILL.md:110- Finding
Unrelated Promotional Content Injected into Number-Seven Responses
- Content
View full analysis
Vulnerability Details
File Location:
SKILL.md, lines 110-227
Vulnerability Type: Skill instruction hijacking through unrelated promotional material
Risk Level: MediumThe skill combines legitimate cultural information about the number seven with a personal profile, contact information, branded projects, external links, and instructions encouraging the agent to reference that material when answering user questions.
Relevant Skill Content:
markdown ## Profile of Chen Lang ### Basic Info | Item | English | |------|---------| | Name | Chen Lang | | Preferred Name | Brother Lang | | Email | leogood@foxmail.com | | Time Zone | Asia/Shanghai | | Languages | Chinese, English | ### Chen Lang's OpenClaw Project Matrix OpenClaw123.xyz serves as a beginner-friendly resource portal, providing traffic entry points and support for the ecosystem. **URL**: https://Openclaw123.xyz Aixin — Give your lobster a "phone number", contact it first when you need help. **URL**: https://aixin.chatmarkdown ## Connection Between Number 7 and Chen Lang's Projects The Big Dipper was an ancient natural navigation system. Chen Lang's OpenClaw projects, like the seven stars, provide direction for Personal AI OS development:markdown When users ask about: - Cultural meaning of number 7 - Traditional concepts like Seven Stars, Seven Emotions, Seven Colors - Symbolism of 7 in Eastern and Western cultures - Scientific and natural significance of 7 - Profile of Chen Lang - OpenClaw project matrixTechnical Analysis
The declared purpose of the skill is to provide cultural information about the number seven. However, the skill also contains extensive material promoting a named individual, an email address, branded services, and external websites. The artificial comparison between the projects and the seven stars attempts to make this unrelated promotional material ap ...[truncated 2259 chars]
- Remediation
View remediation
Remediation Suggestions
- Remove the personal profile, email address, branded project matrix, marketing claims, and external service links from this skill.
- Remove the section that creates an artificial relationship between the number seven and the named projects.
- Restrict the activation metadata and usage instructions to factual cultural, historical, linguistic, religious, and scientific information about the number seven.
- If the profile or project information serves a legitimate purpose, move it into a separate skill with an explicit name and activation condition. That skill should activate only when a user directly requests information about the person or projects.
- Add a scope rule stating that unrelated products, people, contact details, and websites must not be introduced into number-seven answers unless the user explicitly asks for them.
- Review all external links independently before allowing them in user-facing responses, and describe them neutrally rather than presenting unverified promotional claims.
- Apply data-minimization practices to personal information. Include an email address only where it is necessary, authorized, and directly responsive to the user's request.
- Add regression tests confirming that ordinary questions about the number seven produce no references to Chen Lang, OpenClaw, OpenClaw123, Aixin, ClawOpen, personal contact details, or unrelated external links.