xiaoyue-companion
专为软件开发工程师与综合办公文员打造。当你在等待任务执行、工作疲惫或需要鼓励时，使用此技能通过智谱AI自动生成温暖对话回应与场景配图，一键获取专属情绪价值与虚拟陪伴，让AI助手更懂你。
58
66%
Does it follow best practices?
Run evals on this skill
Adds up to 20 points to the overall score
View guide
Low
Low-risk findings worth noting
Fix and improve this skill with Tessl
tessl review fix ./projects/companion-simple/SKILL.mdThe canonical home for this skill is xiaoyue-companion in anbeime/skill
Low
Low-risk findings.
1 low severity finding. Worth noting, but not necessarily harmful.
W011: Third-party content exposure detected (indirect prompt injection risk).
What this means
The skill exposes the agent to untrusted, user-generated content from public third-party sources, creating a risk of indirect prompt injection. This includes browsing arbitrary URLs, reading social media posts or forum comments, and analyzing content from unknown websites.
Why it was flagged
The required workflow fetches and parses a remote GitHub README.md file (`GITHUB_RAW_README_URL`), which is community-maintained and constitutes outsider-authored free text ingested by the agent.
- Repository
- anbeime/skill
- Commit
d9e888d
- Audited
- Security analysis
Is this your skill?
If you maintain this skill, you can claim it as your own. Once claimed, you can manage eval scenarios, bundle related skills, attach documentation or rules, and ensure cross-agent compatibility.