smart-ask-data
问数端到端编排（native CLI 版）：从候选 KN 选定知识网络，用 bkn object-type 发现对象类与字段， 由编排层 LLM 生成 SQL，再由 ontology dataview query 执行取数； 最后输出中文结论与口径说明。 当用户需要指标、统计、趋势、SQL 取数或数据查询时使用。
66
81%
Does it follow best practices?
Run evals on this skill
Adds up to 20 points to the overall score
View guide
Low
Low-risk findings worth noting
Low
Low-risk findings.
1 low severity finding. Worth noting, but not necessarily harmful.
W011: Third-party content exposure detected (indirect prompt injection risk).
What this means
The skill exposes the agent to untrusted, user-generated content from public third-party sources, creating a risk of indirect prompt injection. This includes browsing arbitrary URLs, reading social media posts or forum comments, and analyzing content from unknown websites.
Why it was flagged
本 skill 在运行时通过 `ontology-core` 执行 `bkn get/list`、`bkn object-type list/get`、`dataview get`、`dataview query --sql` 并把返回的“schema 摘要/字段描述/查询结果 JSON”喂入编排层 LLM（用于 SQL 生成与最终总结）；这些返回文本来自外部系统数据源/用户租户内容，属于“非操作用户选择引入的外部来源自由文本”。
- Repository
- UnicomAI/wanwu
- Commit
f618458
- Audited
- Security analysis
Is this your skill?
If you maintain this skill, you can claim it as your own. Once claimed, you can manage eval scenarios, bundle related skills, attach documentation or rules, and ensure cross-agent compatibility.