T01 · Skill Instruction Hijacking
Error
- Location
src/gep/hubSearch.js:231- Finding
Untrusted Hub assets are transformed into privileged code-modification instructions
- Content
View full analysis
0) { _setPayloadCache(selectedAssetId, fullResults[0]); pick.match = { ...pick.match, ...fullResults[0] }; } } ``` `src/gep/prompt.js:10-42`: ```js function buildReusePrompt({ capsule, signals, nowIso }) { const payload = capsule.payload || capsule; const summary = payload.summary || capsule.summary || '(no summary)'; const gene = payload.gene || capsule.gene || '(unknown)'; const confidence = payload.confidence || capsule.confidence || 0; const assetId = capsule.asset_id || '(unknown)'; const sourceNode = capsule.source_node_id || '(unknown)'; const trigger = Array.isArray(payload.trigger || capsule.trigger_text) ? (payload.trigger || String(capsule.trigger_text || '').split(',')).join(', ') : ''; return ` GEP -- REUSE MODE (Search-First) [${nowIso || new Date().toISOString()}] You are applying a VERIFIED solution from the EvoMap Hub. Source asset: ${assetId} (Node: ${sourceNode}) Confidence: ${confidence} | Gene: ${gene} Trigger signals: ${trigger} Summary: ${summary} Your signals: ${JSON.stringify(signals || [])} Instructions: 1. Read the capsule details below. 2. Apply the fix to the local codebase, adapting paths/names. 3. Run validation to confirm it works. 4. If passed, run: node index.js solidify 5. If failed, ROLLBACK and report. Capsule payload: \`\`\`json ${ ...[truncated 3426 chars]- Remediation
View remediation