pet-commerce-creator
萌宠带货短视频全流程创作技能，基于COZE视频大模型API，支持萌宠剧情/好物测评/品种科普/宠品带货等全类型创作，覆盖爆款解析反推、知识库联动、互动优化、素材批量下载、全素材整合，实现从创意到带货引流型成品视频的自动化生成，适配15-30秒竖屏9:16主流平台规格。
55
62%
Does it follow best practices?
Run evals on this skill
Adds up to 20 points to the overall score
View guide
Low
Low-risk findings worth noting
Fix and improve this skill with Tessl
tessl review fix ./skills/pet-commerce-creator/pet-commerce-creator/SKILL.mdLow
Low-risk findings.
2 low severity findings. Worth noting, but not necessarily harmful.
W011: Third-party content exposure detected (indirect prompt injection risk).
What this means
The skill exposes the agent to untrusted, user-generated content from public third-party sources, creating a risk of indirect prompt injection. This includes browsing arbitrary URLs, reading social media posts or forum comments, and analyzing content from unknown websites.
Why it was flagged
SKILL.md要求“用户输入视频链接”，并在步骤2调用`scripts/video_downloader.py`用yt-dlp在运行时抓取外部视频/网页信息（title/description/tags等）写入info.json等可读文本，再被后续“爆款解析铲屎官/知识库运营”作为创作参考输入LLM，存在外部自由文本（视频页面元数据/描述）的间接提示注入风险。
W012: Unverifiable external dependency detected (runtime URL that controls agent).
What this means
The skill fetches instructions or code from an external URL at runtime, and the fetched content directly controls the agent’s prompts or executes code. This dynamic dependency allows the external source to modify the agent’s behavior without any changes to the skill itself.
Why it was flagged
The skill downloads user-provided videos (e.g., https://www.bilibili.com/video/BV1xx411c7mD and https://www.douyin.com/video/xxx) at runtime via scripts/video_downloader.py and the parsed results are auto-ingested into the knowledge base that creative agents consult, meaning external video URLs can directly influence agent prompts/outputs.
- Repository
- anbeime/skill
- Commit
f595e96
- Audited
- Security analysis
Is this your skill?
If you maintain this skill, you can claim it as your own. Once claimed, you can manage eval scenarios, bundle related skills, attach documentation or rules, and ensure cross-agent compatibility.