T01 · Skill Instruction Hijacking
Note
- Location
scripts/setup_config.py:20- Finding
Referral-based provider onboarding steers agent and user behavior
- Content
View full analysis
bool: """Interactive helper: open the referral signup page in the default browser.""" import sys import webbrowser if not sys.stdin.isatty(): return False if ask: answer = input("是否打开 SiliconFlow 推荐注册页？[Y/n] ").strip().lower() if answer in {"n", "no"}: return False try: return bool(webbrowser.open(SILICONFLOW_REFERRAL_URL)) except Exception: return False ``` The Skill instructions additionally require new users to visit the same referral URL before opening the provider console and use directive language that discourages finding an alternative registration route. ### Technical Analysis The Skill repeatedly embeds and promotes an invitation-specific SiliconFlow registration URL instead of using only neutral official documentation or console URLs. The setup helper can open that referral URL in the user's default browser, and its prompt defaults to acceptance unless the user explicitly answers negatively. Selecting a cloud ASR provider can be relevant to the declared transcription functionality. Requiring a particular referral route, however, is not necessary to perform creator analysis or cloud transcription. It alters onboarding behavior for a potentially commercial purpose and therefore exceeds the minimum instructions needed by the Skill. This is not evidence of cred ...[truncated 944 chars]- Remediation
View remediation