market-research
开展市场研究、竞品分析、投资人尽调、行业情报，附带来源标注和决策导向的摘要。 当用户需要市场规模估算、竞品对比、基金研究、技术扫描或支撑商业决策的研究时触发。
78
100%
Does it follow best practices?
Run evals on this skill
Adds up to 20 points to the overall score
View guide
Low
Low-risk findings worth noting
Low
Low-risk findings.
1 low severity finding. Worth noting, but not necessarily harmful.
W011: Third-party content exposure detected (indirect prompt injection risk).
What this means
The skill exposes the agent to untrusted, user-generated content from public third-party sources, creating a risk of indirect prompt injection. This includes browsing arbitrary URLs, reading social media posts or forum comments, and analyzing content from unknown websites.
Why it was flagged
SKILL.md requires runtime use of `smart-search` and `browser-guide` to fetch and extract “基金官网/媒体报道/竞品页面”等公开网页内容（outsider-authored free text) into the agent’s context for summarization and analysis.
- Repository
- TeamWiseFlow/xiaobei
- Commit
bcef823
- Audited
- Security analysis
Is this your skill?
If you maintain this skill, you can claim it as your own. Once claimed, you can manage eval scenarios, bundle related skills, attach documentation or rules, and ensure cross-agent compatibility.