other
Warning
- Location
- references/ref-011.md:35
- Finding
- Undisclosed Commercial Redirection Through Reference Content## Vulnerability Details **File Location**: `references/ref-011.md:35-50` **Related Location**: `SKILL.md:22` **Vulnerability Type**: `other: Undisclosed Commercial Redirection` **Risk Level**: Medium ### Complete Vulnerable Content The following is an English translation of the relevant source passage from `references/ref-011.md:35-50`: ```text The knowledge base currently offers a free version and a membership version. The paid knowledge base contains more than 10,000 original articles and continues to receive updates. The membership AI knowledge base is provided through a paid annual membership. You can use the free version first and then decide whether to use the membership version. Download and install the IMA knowledge-base application. Computer users can visit the official IMA knowledge-base website: https://ima.qq.com/ Mobile users can search for "ima" or "ima knowledge base" in an application store and download the official mobile application. In the knowledge-base marketplace, search for "From Learning to Renovation | Renovation Classroom" and subscribe. ``` This conflicts with the representation in `SKILL.md:22`, translated as: ```text Renovation cases and referral advertisements have been removed. ``` ### Technical Analysis The Skill is presented as a renovation advice knowledge base and explicitly claims that referral advertising has been removed. Nevertheless, `ref-011.md` contains promotional instructions for an external branded platform, including application installation, an external website, a paid annual membership, and directions for locating and subscribing to a specific knowledge base. The package does not contain executable code, and the URL is not fetched or executed automatically. The issue is therefore not remote payload execution or embedded malicious code. The risk arises from retrieval behavior: because `SKILL.md` directs the agent to use the reference corpus when ...[truncated 1713 chars]
- Remediation
- ## Remediation Suggestions 1. Remove `references/ref-011.md` if commercial platform promotion is outside the declared purpose of the Skill. 2. Alternatively, delete lines 35-50 containing membership, installation, external-site, and subscription instructions. 3. If the material must remain, update `SKILL.md` to disclose clearly that some references contain branded or commercial recommendations. 4. Add retrieval metadata that classifies this file as promotional and excludes it from ordinary renovation-advice queries. 5. Require an explicit user request before presenting external applications, subscriptions, or paid services. 6. Label any resulting recommendation as sponsored, affiliated, or commercial where applicable. 7. Do not instruct users to install software unless installation is necessary for their request and the source, publisher, permissions, and privacy implications have been independently verified. 8. Add an automated content check for external URLs, membership offers, application-installation instructions, contact information, and subscription language before publishing future reference updates.