sn-search-social-cn
用于搜索中文社交平台。脚本入口覆盖 B站视频、知乎问答和抖音视频；小红书、微博当前没有脚本入口，只能通过 browser-use / 公开网页兜底。
70
85%
Does it follow best practices?
Run evals on this skill
Adds up to 20 points to the overall score
View guide
Low
Low-risk findings worth noting
Low
Low-risk findings.
1 low severity finding. Worth noting, but not necessarily harmful.
W011: Third-party content exposure detected (indirect prompt injection risk).
What this means
The skill exposes the agent to untrusted, user-generated content from public third-party sources, creating a risk of indirect prompt injection. This includes browsing arbitrary URLs, reading social media posts or forum comments, and analyzing content from unknown websites.
Why it was flagged
Required workflow uses HTTP requests to outsider-authored public platform data (e.g., Zhihu API at `https://www.zhihu.com/api/v4/search_v3` in `scripts/zhihu_search.py`), then places that returned free-form text fields (title/excerpt/content) into the script’s JSON output (`print_json`), which would be ingested into the agent’s LLM context downstream as “LLM-readable prose.”
- Repository
- OpenSenseNova/SenseNova-Skills
- Commit
179fea1
- Audited
- Security analysis
Is this your skill?
If you maintain this skill, you can claim it as your own. Once claimed, you can manage eval scenarios, bundle related skills, attach documentation or rules, and ensure cross-agent compatibility.