khazix-skills/khazix-writer
数字生命卡兹克（Khazix）的公众号长文写作skill。当用户需要撰写公众号文章、写稿子、续写文章、根据素材产出长文时使用。触发词包括但不限于：写文章、写稿子、帮我写、续写、扩写、公众号文章、长文、出稿、按我的风格写。即使用户只是说"帮我把这个写成文章"或"用我的风格写一下"，只要上下文涉及内容创作和公众号输出，都应该触发。也适用于用户丢过来一个PDF、brief、新闻链接、语音转文字或任何素材说"帮我写篇文章"的场景。不要用于短内容（小红书帖子、推特、朋友圈）或纯标题摘要生成（那个用wechat-title skill）。
68
85%
Does it follow best practices?
Run evals on this skill
Adds up to 20 points to the overall score
View guide
Low
Low-risk findings worth noting
W011: Third-party content exposure detected (indirect prompt injection risk).
What this means
The skill exposes the agent to untrusted, user-generated content from public third-party sources, creating a risk of indirect prompt injection. This includes browsing arbitrary URLs, reading social media posts or forum comments, and analyzing content from unknown websites.
Why it was flagged
The skill's SKILL.md and its references (references/content_methodology.md) explicitly require ingesting user-provided materials such as "新闻链接" or PDFs and instruct sourcing from public social platforms (Twitter, Reddit, 小红书, 微博/抖音/B站), i.e., untrusted third‑party/user‑generated content that the agent is expected to read and that can materially influence writing decisions and actions.
Where we found it
twitter.com
domain · 1 site
The skill explicitly instructs the agent to fetch content from Twitter/X daily for topic selection ("每日搜索'AI'关键词，抓一手资讯"), making it a runtime third-party content source.
references/content_methodology.md
21
**X（Twitter）**：每日搜索"AI"关键词，抓一手资讯，关注AI博主和公司动态
reddit.com
domain · 1 site
The skill explicitly lists Reddit (specific subreddits) as a topic source for the agent to monitor for trending AI content.
references/content_methodology.md
22
**Reddit**：r/artificial、r/ChatGPT、r/singularity、r/ClaudeAI等（100+upvote算比较火）
xiaohongshu.com
domain · 1 site
The skill explicitly lists 小红书 (Xiaohongshu) as a topic source for the agent to monitor AI discussion focus and comments.
references/content_methodology.md
23
**小红书**：大众舆论场里AI的话题焦点，重点关注评论区
weibo.com
domain · 1 site
The skill explicitly lists 微博 (Weibo) as one of the platforms to monitor for hot search topics for topic selection.
references/content_methodology.md
25
**微博/抖音/B站**：热搜话题，至少两三个平台同时火才算真正"破圈"
douyin.com
domain · 1 site
The skill explicitly lists 抖音 (Douyin) as one of the platforms to monitor for hot search topics for topic selection.
references/content_methodology.md
25
**微博/抖音/B站**：热搜话题，至少两三个平台同时火才算真正"破圈"
bilibili.com
domain · 1 site
The skill explicitly lists B站 (Bilibili) as one of the platforms to monitor for hot search topics for topic selection.
references/content_methodology.md
25
**微博/抖音/B站**：热搜话题，至少两三个平台同时火才算真正"破圈"
jike.com
domain · 1 site
The skill explicitly lists 即刻 (Jike) as a topic source for the agent to monitor AI bloggers, product creativity, and industry insights.
references/content_methodology.md
24
**即刻**：AI博主、产品创意、行业洞察
- Audited
- Security analysis