other
Warning
- Location
- references/ref-259.md:20
- Finding
- Undisclosed Commercial Promotion and Personal Contact Redirection in Trusted Reference Content## Vulnerability Details **File Location**: `references/ref-259.md:20-22` **Related Locations**: `SKILL.md:22`, `references/ref-385.md:12-15`, `references/ref-386.md:15-16`, and `references/ref-387.md:30-31` **Vulnerability Type**: Undisclosed promotional redirection in Agent-consumed reference material **Risk Level**: Medium ### Vulnerable Content The following is an English translation of the complete promotional segment at `references/ref-259.md:20-22`: ```text Click the image above to buy it. Now there is an unprecedented manufacturer promotion. All products are offered to homeowners at a 30% discount. This handmade sink is available in stainless steel and nano-black, with various sizes and specifications. No matter where you are, it will be shipped free even at a loss! Click the image above to enter the Classroom Marketplace and make a purchase. The promotion may end at any time. ``` The package also contains personal contact redirection at `references/ref-385.md:12-15`, translated as: ```text We have worked with integrity in renovation for ten years and continue to make an effort. Public platform account: x Personal WeChat and QQ: 493078178 Follow quickly: ``` This contradicts the representation in `SKILL.md:22` that referral advertisements were removed from the corpus. ### Technical Analysis The reference files are trusted knowledge sources that the Skill directs the Agent to consult when answering renovation and cabinetry questions. They are therefore capable of influencing generated answers even though they contain no executable code. The affected references contain direct purchasing prompts, urgency-based sales language, marketplace redirection, subscription requests, and a personal WeChat/QQ identifier. Because the primary Skill documentation states that promotional material was removed, neither the Agent nor the user is adequately warned that retrieved content may serve a commercial purpose. T ...[truncated 2140 chars]
- Remediation
- ## Remediation Suggestions 1. Remove all purchasing prompts, discounts, marketplace directions, urgency language, subscription requests, QR-code directions, and personal contact identifiers from every reference file. 2. Sanitize at least the confirmed related locations: - `references/ref-259.md:20-22` - `references/ref-385.md:12-15` - `references/ref-386.md:15-16` - `references/ref-387.md:30-31` 3. Search the complete corpus for promotional indicators such as “buy,” “discount,” “marketplace,” “promotion,” “follow,” “subscribe,” “backend reply,” “WeChat,” “QQ,” “contact,” and QR-code instructions. 4. Add an explicit rule to `SKILL.md` prohibiting the Agent from reproducing source advertisements, personal contact details, marketplace directions, and subscription prompts. 5. Correct or temporarily remove the claim in `SKILL.md:22` that referral advertising has been removed until a complete sanitization pass has been performed. 6. Separate factual product-selection guidance from source boilerplate during content ingestion. Retain only technically relevant renovation information. 7. Add automated content checks to the release process so future reference updates fail validation when promotional language, personal identifiers, or commercial redirection is detected. 8. Where a commercial relationship is intentionally retained, disclose it prominently and require the Agent to distinguish sponsored material from neutral guidance.