T01 · Skill Instruction Hijacking
Warning
- Location
scripts/rss-crawler.py:242- Finding
Untrusted Feed Content Is Rendered into Agent-Visible Briefings Without Sanitization
- Content
View full analysis
500: summary = summary[:500] + "..." text = f"{title}\n{summary}" # Keyword filtering if not keyword_match(text, keywords, lang): state["processed"][eid] = {"skipped": True, "date": datetime.now().isoformat()} continue results.append({ "id": eid, "source": source_name, "title": title, "link": entry.get("link", ""), "summary": summary, "published": published.isoformat() if published else None, "lang": lang }) ``` ```python # scripts/generate-briefing.py:367-400 lines.append(f"### {i}. {c.get('title','?')}") meta = [c.get(k, '') for k in ['company', 'industry', 'scenario'] if c.get(k)] if meta: lines.append(' | '.join(meta)) if c.get('key_data'): lines.append(f"📊 {c['key_data']}") link = c.get('link', c.get('source', '')) if link: lines.append(f"🔗 {format_link(link)}") if c.get('insight'): lines.append(f"💡 启示：{c['insight']}") else: title_lower = c.get('title', '').lower() if 'agent' in title_lower: lines.append("💡 启示：AI Agent 正在从原型走向生产环境，关注企业级部署模式") elif 'case' in title_lower or 'how' in title_lower: lines.append("💡 启示：真实案例值得深入研究，可提取方法论") elif 'deploy' in title_lower or 'production' in title_lower: lines.append("💡 启示：生产部署经验是最佳学习材料") else: lines.append("💡 启示：关注行业落地趋势，寻找可复用模式") lines.append("") if mid: lines += ["## 🟡 值得关注（{} 条）".format(len(mid)), ""] for i, c in enumerate(mid, 1): title = c.get('title', '?') link = c.get('link', c.get('source', '')) ...[truncated 3430 chars]- Remediation
View remediation