video-creation-pro
10大智能体协同的商品视频创作系统，全流程质量闭环（创作→质检→反馈迭代），强制使用COZE视频大模型API进行视频合成，彻底移除本地依赖包逻辑，适用于智能硬件、美妆护肤、家居家电等多品类商品视频创作
46
48%
Does it follow best practices?
Run evals on this skill
Adds up to 20 points to the overall score
View guide
Low
Low-risk findings worth noting
Fix and improve this skill with Tessl
tessl review fix ./skills/video-creation-pro/video-creation-pro/SKILL.mdLow
Low-risk findings.
1 low severity finding. Worth noting, but not necessarily harmful.
W011: Third-party content exposure detected (indirect prompt injection risk).
What this means
The skill exposes the agent to untrusted, user-generated content from public third-party sources, creating a risk of indirect prompt injection. This includes browsing arbitrary URLs, reading social media posts or forum comments, and analyzing content from unknown websites.
Why it was flagged
SKILL.md要求“视频工程师”把字幕参数包直接传入COZE视频大模型API合成；但该“字幕文本/参数包内容”来自步骤6-7的字幕师与音效师输出（最终包含自由文本字幕内容），而这些由用户输入的商品信息/需求间接触发生成，因此运行时会把用户提供的（非操作人选择引入的）自由文本写入LLM上下文，存在间接提示注入风险；同时SKILL.md中并未展示强制清洗/隔离“字幕文本”来源为可信字段。
- Repository
- anbeime/skill
- Commit
f595e96
- Audited
- Security analysis
Is this your skill?
If you maintain this skill, you can claim it as your own. Once claimed, you can manage eval scenarios, bundle related skills, attach documentation or rules, and ensure cross-agent compatibility.