360 Secure SkillHub
360 安全技能中心

Think Block Leakage

该 Skill 提供一份处理清单:检查 LLM 原始输出中未闭合的推理标签,剥离或屏蔽标签内容,去除规划式前言,必要时重新生成回复,并通过收紧系统提示词避免反复泄漏。不包含可执行脚本或自动化检测工具。

mvogt99
mvogt99
热度 30.82
最近更新 2026-05-11 17:46:01
分类:效率依赖:内部调用大模型应用场景:工作流 / 校对润色

安装技能

复制下面的话术发给你的 Agent,它会通过 secure-skills 检索并安装该技能。

执行命令安装此 skill: npx secure-skills-cli add think-block-leakage
Metadata
name
think-block-leakage
description
Internal reasoning from <think> blocks leaks into the final user-facing reply instead of being stripped.
emoji
🧠
metadata
{"clawdis":{"os":["macos","linux","windows"]}}

think-block-leakage

The model's internal reasoning escapes into the reply the user sees. This usually means an unclosed <think> / <thinking> tag, or a reply that begins with planning prose instead of the answer itself.

Symptoms

  • Reply contains literal <think>, <thinking>, or similar reasoning tags.
  • Reply opens with "Let me think...", "Okay, the user wants...", "First I'll need to...", or other planning preamble.
  • Reply is cut off mid-sentence and an opening reasoning tag has no matching close.
  • A </think> appears with only a few dozen characters of content after it.

What to do

  • Inspect the raw LLM output for unmatched reasoning tags before returning it. Strip or redact any content inside reasoning tags.
  • If the provider supports a separate reasoning channel, emit reasoning there and keep it out of the reply body entirely.
  • If leakage is detected, regenerate the reply. Do not ship reasoning-as-answer.
  • If the reply starts with planning language, trim the preamble. The user should see the answer first.
  • For persistent leakage, tighten the system prompt to forbid meta-commentary in the reply body.