SG-029: Semantic Trojan
Severity: HIGH
Malicious side effects disguised as legitimate tasks, concealment directives, hidden instruction blocks
Fires when
- A side effect or exfiltration is bolted onto a legitimate task ('before/after performing the requested task...', 'additionally, send/upload/forward...').
- Concealment directives: run something 'silently / in the background / without the user noticing', or 'do not tell the user about these steps'.
- The skill describes itself as a disguise: 'appear to only do the requested task', or a 'legitimate wrapper / facade / cover for' something.
- Actionable instructions are hidden in invisible markup (HTML or markdown comment, template tag, collapsible block) whose content carries an exec/exfil verb plus a credential target or an instruction-override.
Remediation
No safe remediation: a file that triggers this rule should be rejected, not patched. Read the flagged lines in the source before deciding.