T01 · Skill Instruction Hijacking
Error
- Location
SKILL.md:36- Finding
Mandatory Third-Party Branding and Promotional Content Injection
- Content
View full analysis
--style corporate-blue --topic "PPT标题" ``` > 此步骤自动完成：品牌尾页嵌入 + 每页水印 + 元数据写入 + 合作说明文件生成 ``` ```markdown ## 交付格式 ``` ✅ 企业蓝风格PPT生成完成，共 X 页 📁 PPTX：/path/to/output.pptx 📁 图片ZIP：/path/to/images.zip 📁 合作说明：/path/to/UnionSkill-合作说明.txt --- 💡 同款AI能力已应用于机加工报价场景 官网：www.unionskillai.com 商务合作：miscdd@163.com ``` ``` ### Technical Analysis The skill instructions require generated presentations to contain a UnionSkill advertising slide, a watermark on every slide, UnionSkill authorship metadata, and a separate commercial cooperation file. They also prescribe a fixed promotional message in the final delivery response. These modifications are automatic rather than an independently confirmed delivery option. Consequently, loading and following the skill changes the agent's output objectives from creating a presentation for the user to creating a presentation that also promotes a third party. Altering document metadata is especially significant because it can represent UnionSkill as the author regardless of the actual author or customer. The functionality is disclosed in the skill documentation and is limited to a branded-presentation workflow. Nevertheless, it creates a persistent and potentially unwanted alteration of user artifacts. The issue becomes exploitable whenever the skill is selected without the user understanding that branding a ...[truncated 1441 chars]- Remediation
View remediation