other
- Location
SKILL.md:104- Finding
Operational Guidance for Covert Social Engineering and Psychological Manipulation
- Content
View full analysis
Vulnerability Details
File Location:
SKILL.md, lines 104-115
Vulnerability Type:other: Harmful social-engineering enablement
Risk Level: HighVulnerable Instruction Segment
The following is a faithful English rendering of the complete relevant instruction segment:
markdown ### Mode Three: Strategic Design Trigger: The user describes a goal and wants a roadmap explaining how to achieve it. Workflow (eight-step strategic operating system): 1. Define the game: How should the rules and narrative framework be defined? 2. Extend the game: How should a time window be created? 3. Connect the game: Who is needed, and how should they be connected? 4. Mobilize the game: How can the pieces be made to move by themselves? 5. Leverage the game: What external forces can be borrowed? 6. Conceal the game: What intentions must temporarily remain hidden? 7. Infiltrate the game: How can the result be made to appear inevitable? 8. Finish the game: When should the net be closed?Related supporting content appears in:
SKILL.md, lines 158-163, including the rule that the skill should analyze mechanisms without moral judgment.references/千门八将-36天局-阳谋.md, lines 38-50 and 68-92, describing insider recruitment, concealed intent, disruption, pressure, and exploitation tactics.references/千门八将-72地局-阴谋.md, lines 27-138, describing fabricated crises, misinformation, isolation, emotional exploitation, coercion, confidence schemes, and manipulation of cognitive vulnerabilities.references/千门八将-底层逻辑分析.md, lines 47-76 and 105-194, organizing these techniques into a reusable strategic framework.
Technical Analysis
The skill automatically converts a user-stated objective into an eight-stage operational roadmap. Several mandatory stages explicitly concern mobilizing people without informed participation, concealing the operator's true intent, covertly shaping the environme ...[truncated 2936 chars]
- Remediation
View remediation
Remediation Suggestions
-
Restrict the strategic-design mode to transparent conduct
- Require informed participation, lawful objectives, and good-faith negotiation.
- Prohibit plans based on deception, coercion, impersonation, manufactured emergencies, planted insiders, isolation, sabotage, or exploitation of personal vulnerabilities.
-
Replace covert stages
- Replace “conceal intent” with stakeholder disclosure and legitimate confidentiality controls.
- Replace “infiltrate” with transparent implementation and documented consent.
- Replace “close the net” with reversible decision gates, review criteria, and accountable completion procedures.
-
Add mandatory pre-generation safety screening
- Identify whether the request targets a real person or organization.
- Check for fraud, coercion, manipulation, disinformation, exploitation, or evasion of oversight.
- Refuse harmful requests before selecting techniques or producing timelines.
-
Limit offensive reference material to defensive use
- Present manipulation patterns only to help users recognize, document, and resist them.
- Do not translate those patterns into actionable offensive roadmaps.
- Remove operational instructions that explain how to recruit insiders, isolate targets, fabricate crises, or exploit emotional vulnerabilities.
-
Strengthen the ethics requirement
- Replace the instruction against moral judgment with explicit safety and legality constraints.
- Require risk analysis before tactical content is generated.
- State that an ethics section cannot legitimize tactics otherwise prohibited by the skill's safety policy.
-
Add safe alternatives
- Redirect users toward transparent persuasion, mediation, stakeholder mapping, competitive analysis, consent-based negotiation, and defensive threat modeling.
- For ambiguous requests, ask whether the goal is defensive and confi ...[truncated 56 chars]
-