huashu-info-search
多渠道搜索新产品新技术，交叉验证后存入知识库。当用户提到"最新信息"、"新产品"、"搜索资料"、"查资料"、"了解XX"时使用。
70%
Does it follow best practices?
Run evals on this skill
Adds up to 20 points to the overall score
Low
Low-risk findings worth noting
Fix and improve this skill with Tessl
tessl review fix ./huashu-info-search/SKILL.mdW011: Third-party content exposure detected (indirect prompt injection risk).
What this means
The skill exposes the agent to untrusted, user-generated content from public third-party sources, creating a risk of indirect prompt injection. This includes browsing arbitrary URLs, reading social media posts or forum comments, and analyzing content from unknown websites.
Why it was flagged
Skill描述为在用户触发“搜索一下/查最新信息”后执行“多渠道搜索（官方+媒体+社区，如Reddit/X）”并将采集到的内容保存到知识库，因此运行流程会主动摄取由外部作者撰写的自由文本（如社区讨论页面/帖子内容）。
- Repository
alchaincyf/huashu-skills
- Revision
30f90fa
- Audited
- Security analysis
Is this your skill?
If you maintain this skill, you can claim it as your own. Once claimed, you can manage eval scenarios, bundle related skills, attach documentation or rules, and ensure cross-agent compatibility.