smart-search-tables
找表/找数端到端编排：在元数据型知识网络下用 ontology bkn object-type query 检索表/视图实例， 再在职责型知识网络下检索相关部门职责与治理边界，最后汇总为中文结论 （候选表 + 职责要点 + 下一步）。当用户问「表在哪、哪个视图、数据资产归属、谁负责这类数据」时使用。 所有 ontology CLI 执行均委托 ontology-core 完成；本 skill 不直接执行 CLI。
73
92%
Does it follow best practices?
Run evals on this skill
Adds up to 20 points to the overall score
View guide
Low
Low-risk findings worth noting
Low
Low-risk findings.
1 low severity finding. Worth noting, but not necessarily harmful.
W011: Third-party content exposure detected (indirect prompt injection risk).
What this means
The skill exposes the agent to untrusted, user-generated content from public third-party sources, creating a risk of indirect prompt injection. This includes browsing arbitrary URLs, reading social media posts or forum comments, and analyzing content from unknown websites.
Why it was flagged
由于步骤1/2的 `ontology-core` 会执行运行时 `bkn object-type query ...` 并将返回的 `embeddings_text` 等字段（检索命中的元数据/职责条目，可能包含任意人可编辑的文本）读入并用于第3步总结，属于“公用检索到的外部免费文本（数据库/索引内容）”进入 LLM 上下文的间接 prompt injection 风险。
- Repository
- UnicomAI/wanwu
- Commit
f618458
- Audited
- Security analysis
Is this your skill?
If you maintain this skill, you can claim it as your own. Once claimed, you can manage eval scenarios, bundle related skills, attach documentation or rules, and ensure cross-agent compatibility.