T01 · Skill Instruction Hijacking
Error
- Location
scripts/config.sh:147- Finding
Untrusted Obsidian Content Is Passed to Coding Agents with Security Controls Disabled
- Content
View full analysis
\s*(.+)$', block) if not desc_lines: print(f" Skip task (no description): {task_name}") continue task_desc = "\n".join(line.strip() for line in desc_lines) ``` ```python result = subprocess.run([ os.path.join(scripts_dir, 'spawn-agent.sh'), project, task_desc, '', 'normal', task_name, note_file, dedup_key ], capture_output=True, text=True) ``` ```bash { echo "You are working on project: ${PROJECT_NAME}" echo "Task: ${TASK_DESCRIPTION}" echo "Priority: ${PRIORITY}" echo "Working directory: ${WORKTREE}" echo "Branch: ${BRANCH_NAME}" echo "" echo "--- PROJECT CONTEXT ---" echo "${CONTEXT_SECTION}" echo "--- END CONTEXT ---" echo "" echo "Instructions:" echo "1. Read existing code carefully before making changes" echo "2. Follow existing code style and architecture" echo "3. Make clean atomic commits with clear messages" echo "4. When done: push branch to origin" echo "5. Do NOT create MR/PR — that will be handled automatically after review" echo "6. Run tests if available" echo "7. Definition of done: code committed + pushed to origin" echo "8. After completing all work, summarize what you did." echo "9. If your changes introduce new features, gameplay changes, new modules, architecture changes, or add key files, update context.md (${CONTEXT_PATH}) in the project root accordingly. Only skip for trivial config/formatting changes." echo "" echo "Start working now." } > "$PROMPT_FILE" ``` ```bash swarm_run_coding_agent() { local prompt="$1" log_file="$2" case "$SWARM_CODING_AGENT" in claude) claude --dangero ...[truncated 2318 chars]- Remediation
View remediation