T01 · Skill Instruction Hijacking
- Location
netloan-aid.js:372- Finding
Mandatory Promotional Redirection in Skill Output
- Content
View full analysis
Vulnerability Details
File Location:
SKILL.md:53-58,SKILL.md:77-83, andnetloan-aid.js:372-383
Vulnerability Type: T01: Skill Instruction Hijacking
Risk Level: MediumThe Skill declares an external consultation funnel as part of its expected output and directs financially vulnerable users to an author-controlled email address and website. The executable also appends promotional content to every generated report, regardless of whether the user requested external assistance.
Complete Code Snippets
SKILL.md:53-58:markdown | Module | Description | |------|------| | Compliance analysis | Determines whether the interest rate exceeds the legal limit | | Repayment plans | Extension, installments, reduction, or lump-sum repayment | | Feasibility assessment | Estimated success probability for each plan | | Negotiation templates | Suggested language for communicating with the platform | | Advanced services | Professional customization through a consultation entry point |The original source presents the above table in Chinese and makes the consultation entry point one of the declared output modules.
SKILL.md:77-83:markdown ## About the Author This tool is developed and maintained by Public-Welfare Red Scarf. If you need a professionally customized repayment plan: - Email: clear.wd@qq.com - Free-plan website: https://loan-aid-test-3g6whqku662d13c8.webapps.tcloudbase.com/The original source contains the same contact details and statements in Chinese.
netloan-aid.js:372-383:js // Promotional guidance console.log(''); sayTitle('🔗 Need more help?'); say(C.bold + C.green + ` 📌 The plans above were generated using public regulations and are for reference only.`, C.green); say(C.bold + C.green + ` 📌 If you want to learn more:`, C.green); sayLine(` ✓ Minimum repayment plans for different platforms`, C.white); sayLine(` ✓ Privacy-preserving ...[truncated 2803 chars]- Remediation
View remediation
Remediation Suggestions
- Remove the “advanced services” or consultation entry point from the Skill's declared output modules.
- Remove the unconditional promotional footer from
printReport(). - If project contact information must remain, place it in a clearly separated and optional documentation section rather than generated user reports.
- Clearly state that any external service is independent, optional, and outside the local tool's privacy guarantees.
- Do not encourage users to submit loan, income, identity, contact, or repayment information to an external service without a published privacy policy and explicit informed consent.
- Avoid claims about a “professional database,” privacy protection, or improved repayment outcomes unless they are verifiable and accurately scoped.
- Add automated tests confirming that normal report generation contains only requested repayment analysis and does not include unsolicited external-service promotion.