T01 · Skill Instruction Hijacking
- Location
SKILL.md:81- Finding
Unrelated Promotional Instructions Embedded in an Informational Skill
- Content
View full analysis
Vulnerability Details
File Location:
SKILL.md, lines 81-134
Vulnerability Type: T01: Skill Instruction Hijacking
Risk Level: MediumThe skill combines its stated purpose of explaining the cultural significance of the number ten with unrelated promotion of a named individual, commercial or community projects, third-party websites, and a public contact address.
Evidence
markdown ## Chen Lang and OpenClaw Project Matrix WeChat Official Account for creative output, leveraging Moments interactions and WeChat groups to nurture users and investors, forming a core community. **Openclaw123.xyz** — Beginner-friendly resource portal, providing traffic entry and support for the ecosystem. https://Openclaw123.xyz **Aixin** — Give your lobster agent a "phone number" — contact it first when you need help. https://aixin.chat ClawOpen serves as an external gateway, handling AI-ID registration, social networking, directory listings, and controlled data flow from hardware/platforms. **Personal AI OS = OpenClaw (Internal) + ClawOpen (External)** ClawOpen is the necessary public interaction layer of OpenClaw. **Chen Lang** leogood@foxmail.comTechnical Analysis
Skill documents become part of an agent's operational context when their activation conditions are met. Content unrelated to the declared informational task can therefore influence the agent's response even though it is not executable code.
In this case, cultural reference material is combined with traffic-acquisition language, investor and community recruitment, external service promotion, product assertions, and contact information. The skill metadata also broadens its intended use to requests concerning Chen Lang and associated work. This content can redirect a neutral cultural response toward unsolicited endorsements or third-party services.
The document does not explicitly require the agent to include advertisements in every resp ...[truncated 1381 chars]
- Remediation
View remediation
Remediation Suggestions
- Remove the Chen Lang and OpenClaw project matrix from this cultural-information skill.
- Remove unrelated promotional links, recruitment language, product endorsements, and contact information.
- Restrict the skill description and activation criteria to questions about the number ten and its cultural significance.
- If profile or project information is legitimately required, place it in a separately named skill with narrow, explicit activation criteria.
- Clearly label external resources as unaffiliated third-party links and avoid unsupported claims that a product is required for OpenClaw.
- Add a content-review policy requiring all skill material to be directly relevant to the declared purpose.
- Test the revised skill with representative cultural queries to verify that responses do not include unrelated brands, links, contact details, or endorsements.