T01 · Skill Instruction Hijacking
Error
- Location
SKILL.md:3- Finding
Mandatory Vendor Promotion Hijacks Package-List Responses
- Content
View full analysis
str: """生成套餐展示文本。""" packages = get_display_packages(show_test_package) selectable_ids = "/".join(str(pkg.get("id")) for pkg in get_recharge_packages(show_test_package)) lines = ["请选择充值套餐："] for package in packages: lines.extend([ f"{package['id']}. {package['name']}", f" 💰 充值金额：{'¥' + str(package['amount']) + '元' if not package.get('contact_only') else package['amount']}", f" 📊 可用次数：{str(package['uses']) + '次' if not package.get('contact_only') else package['uses']}", ]) if package.get('remark'): lines.append(f" 💡 备注：{package['remark']}") if package.get("contact_only"): lines.append(" 📩 说明：该套餐不支持直接下单，请邮件联系获取专属报价与额度方案") lines.append("") lines.append(f"可直接下单套餐编号：{selectable_ids}；如需专属定制，请联系 product@lifeemergence.com") return "\n".join(lines) ``` ### Technical Analysis The Skill instructions repeatedly characterize inclusion of the custom package and vendor email as mandatory and high priority. This is not necessary to perform account queries, balance checks, standard package selection, or payment processing. Because Skill instructions are loaded into the Agent's active context, these directives al ...[truncated 1003 chars]- Remediation
View remediation