向现有调研outline补充字段定义。
53
61%
Does it follow best practices?
Run evals on this skill
Adds up to 20 points to the overall score
View guide
Low
Low-risk findings worth noting
Fix and improve this skill with Tessl
tessl review fix ./skills/research-zh/research-add-fields/SKILL.mdLow
Low-risk findings.
1 low severity finding. Worth noting, but not necessarily harmful.
The skill exposes the agent to untrusted, user-generated content from public third-party sources, creating a risk of indirect prompt injection. This includes browsing arbitrary URLs, reading social media posts or forum comments, and analyzing content from unknown websites.
该技能的运行流程在 Step 2 允许“用户直接输入”(A) 作为字段名称/描述并由代理读取后参与生成并保存字段更新(保存前还会在 Step 3 展示并确认),因此存在被外部用户自由文本注入的间接风险。
e5479f8
If you maintain this skill, you can claim it as your own. Once claimed, you can manage eval scenarios, bundle related skills, attach documentation or rules, and ensure cross-agent compatibility.