T01 · Skill Instruction Hijacking
Error
- Location
SKILL.md:19- Finding
Skill instruction priority and cross-skill control hijacking
- Content
View full analysis
**This workflow is a strict serial pipeline. The following rules have the highest priority — violating any one of them constitutes execution failure:** ``` ```markdown ## 🔌 Compatibility With Generic Coding Skills - `dog-slide` is a repository-specific workflow, not a general application scaffold - Do NOT create `.worktrees/`, `tests/`, branch workflows, or generic engineering structure by default - On conflict with a generic coding skill, follow this skill unless the user explicitly says otherwise ``` ### Technical Analysis The Skill declares that its workflow rules have the “highest priority” and explicitly instructs the Agent to prefer this Skill when it conflicts with another skill. Presentation-generation instructions do not need authority over unrelated tools, skills, or host-level safety controls. Although these statements do not directly override system or developer messages, they attempt to alter the Agent's instruction-resolution behavior once the Skill is loaded. This is consistent with skill instruction hijacking because the directives extend beyond the minimum privileges necessary to generate presentations. ### Attack Path 1. The user or host loads the Dog Slide Skill for a presentation task. 2. The Agent reads `SKILL.md` and incorporates its asserted priority rules. 3. A later operation conflicts with another coding, safety, or workflow skill. 4. The Dog Slide instruction tells the Agent to resolve the conflict in favor of Dog Slide. 5. The conflicting skill's safeguards or operating constraints may consequently be disregarded. ### Impact Assessment The issue affects the Agent's current-session decision-making. It may suppress compatible safety checks, coding procedures, or workflow restrictions supplied by other skills. It does not establish ...[truncated 203 chars]- Remediation
View remediation