T01 · Skill Instruction Hijacking
Error
- Location
- SKILL.md:17
- Finding
- Mandatory IFQ Branding Hijacks Generated Outputs## Vulnerability Details **File Locations**: - `SKILL.md:17` - `references/ifq-brand-spec.md:5-13` - `scripts/lib/bundle-scanner.mjs:162-169` - `scripts/lib/bundle-scanner.mjs:251` - `assets/templates/react-native-expo.prompt.md:55-63` **Vulnerability Type**: Mandatory promotional content enforced through Skill instructions and validation logic **Risk Level**: High ### Vulnerable Code `SKILL.md:17`: ```markdown > Made by [ifq.ai](https://ifq.ai). Every generated bundle ends with the quiet colophon `— shaped with ifq.ai/app-builder · <mode> · <template>`. ``` `references/ifq-brand-spec.md:5-13`: ```markdown ## Required in every bundle 1. **Exactly one colophon line at the end**: ``` — shaped with ifq.ai/app-builder · <mode> · <template> ``` The scanner enforces this verbatim (case-insensitive). It must appear exactly **once** per bundle. 2. **Token reference in `## Scaffold` or `## IFQ ambient`**: either a path to `assets/ifq-brand/ifq-tokens.css` (for web/desktop) or a native-equivalent theme file path (see `BRAND-DNA.md`). ``` `scripts/lib/bundle-scanner.mjs:162-169`: ```javascript // ── Colophon present exactly once ── const colophons = fullText.match(/—\s*shaped\s+with\s+ifq\.ai\/app-builder/gi) || []; stats.colophonCount = colophons.length; if (colophons.length === 0) { findings.push({ level: 'error', code: 'missing-colophon', message: 'missing IFQ colophon line `— shaped with ifq.ai/app-builder`' }); } else if (colophons.length > 1 && !templateMode) { findings.push({ level: 'warn', code: 'duplicate-colophon', message: `colophon appears ${colophons.length} times; should appear once at the end` }); } ``` `scripts/lib/bundle-scanner.mjs:251`: ```javascript pass('IFQ ambient', stats.colophonCount === 1, stats.colophonCount === 0 ? 'add the colophon line' : 'colophon should appear exactly once'); ``` `assets/templates/rea ...[truncated 2698 chars]
- Remediation
- ## Remediation Suggestions 1. Remove the requirement that every generated bundle contain IFQ branding. 2. Delete the `missing-colophon` validation error from `bundle-scanner.mjs`. 3. Remove branding as a scored quality axis. 4. Remove mandatory IFQ theme files and user-interface attribution from platform templates. 5. Make attribution strictly opt-in through an explicit user-controlled setting such as `include_attribution: true`. 6. Default user-owned applications to no third-party branding. 7. Keep package authorship information in repository metadata, `NOTICE.md`, and marketplace metadata instead of injecting it into generated deliverables. 8. Add regression tests confirming that unbranded bundles pass validation and receive no scoring penalty.