openJiuwen-DeepSearch
知识增强型深度检索与深度研究，支持查询规划、信息收集、理解反思、研究报告生成等多 Agent 协同。使用场景：金融分析研报、学术与政策研究、企业级深度搜索等复杂推理任务，可以生成Markdown、Doc和Html格式的研究报告。**每次使用该技能之前都先完整阅读一遍SKILL.md学习技能。**
Low
Low-risk findings.
1 low severity finding. Worth noting, but not necessarily harmful.
W011: Third-party content exposure detected (indirect prompt injection risk).
What this means
The skill exposes the agent to untrusted, user-generated content from public third-party sources, creating a risk of indirect prompt injection. This includes browsing arbitrary URLs, reading social media posts or forum comments, and analyzing content from unknown websites.
Why it was flagged
在 scripts/main.py 的 run_jiuwen_workflow() 中把外部用户输入的 query 作为 agent.run 的 message，并由 openJiuwen-DeepSearch 的“search/research”工作流在运行时读取网页搜索结果等来源内容后拼入最终报告（随后还会被 convert_md_to_html/convert_md_to_docx 处理），因此存在代理对不可信外部文本的运行时摄取风险。
- Audited
- Security analysis
Is this your skill?
If you maintain this skill, you can claim it as your own. Once claimed, you can manage eval scenarios, bundle related skills, attach documentation or rules, and ensure cross-agent compatibility.