miloco-perception-digest
miloco-perception-digest 定时任务的内部步骤，仅由该任务调用。
66
78%
Does it follow best practices?
Run evals on this skill
Adds up to 20 points to the overall score
View guide
Low
Low-risk findings worth noting
Fix and improve this skill with Tessl
tessl review fix ./plugins/skills/miloco-perception-digest/SKILL.mdLow
Low-risk findings.
1 low severity finding. Worth noting, but not necessarily harmful.
W011: Third-party content exposure detected (indirect prompt injection risk).
What this means
The skill exposes the agent to untrusted, user-generated content from public third-party sources, creating a risk of indirect prompt injection. This includes browsing arbitrary URLs, reading social media posts or forum comments, and analyzing content from unknown websites.
Why it was flagged
SKILL.md 的运行步骤会调用 `miloco-cli perceive logs --jsonl` 取“增量感知日志”，这些日志（由系统感知/外部数据源产生的原始文本）随后被按记录原则归纳并追加到 `memory/<YYYY-MM-DD>-miloco-perception.md`，且该文件会整段注入主 agent 全局上下文，因此存在把非操作者撰写的免费文本（日志内容）进入 LLM 上下文的路径。
- Repository
- XiaoMi/xiaomi-miloco
- Commit
f156d34
- Audited
- Security analysis
Is this your skill?
If you maintain this skill, you can claim it as your own. Once claimed, you can manage eval scenarios, bundle related skills, attach documentation or rules, and ensure cross-agent compatibility.