khazix-skills/hv-analysis
横纵分析法（Horizontal-Vertical Analysis）深度研究Skill。由数字生命卡兹克提出，融合历时-共时分析、纵向-横截面研究设计、案例研究法与竞争战略分析。 当用户想要系统性研究一个产品、公司、概念、技术或人物时使用。纵轴追踪完整生命历程，横轴与竞品系统性横向对比，交叉产出洞察，最终输出PDF研究报告。
56
70%
Does it follow best practices?
Run evals on this skill
Adds up to 20 points to the overall score
View guide
Low
Low-risk findings worth noting
W011: Third-party content exposure detected (indirect prompt injection risk).
What this means
The skill exposes the agent to untrusted, user-generated content from public third-party sources, creating a risk of indirect prompt injection. This includes browsing arbitrary URLs, reading social media posts or forum comments, and analyzing content from unknown websites.
Why it was flagged
The SKILL.md's "第一步：联网信息收集" explicitly mandates "必须联网搜索" using sub-agents to gather longitudinal/横向 data (including "用户社区讨论" and user口碑) from public websites, so the agent will fetch and interpret untrusted third‑party web content as part of its analysis workflow.
Where we found it
public web search results
content-type · 4 sites
The SKILL.md explicitly mandates "必须联网搜索" (must search the web) using sub-agents to gather longitudinal and cross-sectional data from public websites, including user community discussions and user reputation/reviews, causing the agent to fetch and interpret untrusted third-party web content.
SKILL.md
26
**必须联网搜索**，不能仅靠已有知识。使用子Agent并行搜索：
SKILL.md
28
- **子Agent 1 — 纵向信息**：起源、创始人背景、发展历程、关键事件、版本迭代、融资、战略转向
SKILL.md
29
- **子Agent 2 — 横向信息**：竞品识别、各竞品特点和用户口碑、行业对比、市场份额
SKILL.md
30
- **子Agent 3**（复杂对象才需要）：补充信息，如创始人深度背景、用户社区讨论
- Audited
- Security analysis