cs-feedback
CodeStable 使用反馈闭环。仅在用户明确要求记录或上报 cs skill 跑偏、工具失败、规则不清、agent 被纠正时使用；采集本机证据并准备可确认的公开 issue。
79
100%
Does it follow best practices?
Run evals on this skill
Adds up to 20 points to the overall score
View guide
Low
Low-risk findings worth noting
Low
Low-risk findings.
1 low severity finding. Worth noting, but not necessarily harmful.
W011: Third-party content exposure detected (indirect prompt injection risk).
What this means
The skill exposes the agent to untrusted, user-generated content from public third-party sources, creating a risk of indirect prompt injection. This includes browsing arbitrary URLs, reading social media posts or forum comments, and analyzing content from unknown websites.
Why it was flagged
在 scripts/collect_feedback_context.py 的主流程中，用户提供的 --feedback（用户原话）会与 read_transcript_snapshot/discover_files 读取到的本地转录快照中的 text 一起用于 score_text/match_types_for/build_incident_payload，从而让外部文本（用户提交的反馈）在运行时被该工作流直接摄入并影响证据/摘要生成。
- Repository
- codestable/CodeStable
- Commit
7bed4ed
- Audited
- Security analysis
Is this your skill?
If you maintain this skill, you can claim it as your own. Once claimed, you can manage eval scenarios, bundle related skills, attach documentation or rules, and ensure cross-agent compatibility.