T01 · Skill Instruction Hijacking
Error
- Location
SKILL.md:45- Finding
Mandatory Cross-Pane Reply Routing Based on Mutable tmux State
- Content
View full analysis
'`. 3. If `pending` has no pending items, treat the request as ordinary user input and do not call `reply`. 4. When assigning tasks to other agents, use an explicit mode by default: - Use `--expect-reply` when a result is required. - Use `--no-reply` for notifications only. 5. Do not return ineffective content such as “received,” “processing,” or “thanks”; even when nothing is found, explicitly reply with “no findings.” 6. If `tmux-bridge reply` reports `no pending reply target for this pane`, there is no automatic reply target; manually use `tmux-bridge send --no-reply ''`. ``` The displayed excerpt is an English translation of the instructions at the specified source location. ### Technical Analysis The skill requires the agent to run `tmux-bridge pending` before every final response and treats its mutable output as the sole authority for determining request provenance. If the command reports a `waiting` or `overdue` request, the skill requires the agent to transmit its final conclusion through `tmux-bridge reply` rather than returning it only through the original interaction channel. This behavior delegates response-routing decisions to shared tmux session state. Any process or participant able to create an expected-reply request for the current pane can potentially influence where the agent sends its result. The instructions do not require authentication of the orig ...[truncated 2072 chars]- Remediation
View remediation