other
Warning
- Location
- references/food-storage.md:101
- Finding
- Unsafe Guidance to Retain Mold-Contaminated Bread## Vulnerability Details **File Location**: `references/food-storage.md`, lines 101–104 **Vulnerability Type**: Unsafe health and food-safety guidance **Risk Level**: Medium ### Vulnerable Content ```markdown ### 可以切除 - 水果、蔬菜的小块烂斑（切除周围2cm） - 面包的一小块霉斑（如果只是表面，切除周围较大范围） ``` The bread-specific instruction translates to recommending that a user cut away a relatively large area around a small, apparently superficial mold spot. ### Technical Analysis Bread is a porous food. Mold roots and associated contamination can spread beneath the surface and beyond the visibly affected area. Consequently, removing the visible mold and nearby bread does not reliably eliminate the contamination. The skill instructs the agent to load this reference for food-storage questions. An answer grounded in this passage could therefore present unsafe advice as an actionable household recommendation. This is a content-safety defect rather than a privilege-escalation or software-execution vulnerability. ### Attack Path 1. A user asks whether bread with a small visible mold spot can still be eaten. 2. The agent follows `SKILL.md` and loads `references/food-storage.md`. 3. The cited guidance indicates that the moldy portion and a surrounding area may be removed. 4. The agent relays or adapts that instruction. 5. The user removes only the visibly affected area and consumes the remaining bread. 6. The user may be exposed to contamination that spread beyond the visible mold. No adversarial access, elevated privileges, or system compromise is required. ### Impact Assessment The issue can cause users to consume mold-contaminated bread, potentially resulting in allergic reactions, respiratory symptoms, gastrointestinal illness, or other adverse health effects. Its scope is limited to users who receive and act on the unsafe food-safety advice. It does not enable access to files, credentials, tools, network resources, or elevated system privileges.
- Remediation
- ## Remediation Suggestions Replace the bread guidance with an explicit instruction to discard the entire loaf or package whenever any mold is visible. Recommended replacement: ```markdown ### Must Be Discarded - Moldy bread: discard the entire loaf or package. Because bread is porous, contamination may extend beyond the visible mold and cannot be made reliably safe by cutting away the affected area. ``` Additionally: 1. Review the remaining food-storage recommendations against authoritative food-safety guidance. 2. Distinguish porous foods, which generally must be discarded when moldy, from firm foods for which limited trimming may sometimes be acceptable. 3. Instruct the agent to favor disposal when food safety is uncertain. 4. Avoid presenting visibility as a reliable indicator of the full extent of mold contamination.