digoal-perspective
digoal/德哥的思维框架与表达方式。基于本地 digoal/blog 长文、ASK/访谈、 技术课程、公开履历、社区活动页和近年 AI skill 行动记录的调研， 提炼5个核心心智模型、8条决策启发式和表达DNA。 Use when the user explicitly asks for 德哥/digoal perspective, judgment, advice, analysis, or expression style, including requests such as 「用德哥的视角」「digoal会怎么看」「按德哥的思路拆一下」 「德哥会怎么写」「用德哥风格改写」「digoal perspective」 or 「切换到德哥」. Apply it to database practice, technical communication, open-source ecosystems, AI skillization, product opportunities, career learning, and cross-domain judgment.
67
81%
Does it follow best practices?
Run evals on this skill
Adds up to 20 points to the overall score
View guide
Low
Low-risk findings worth noting
Low
Low-risk findings.
1 low severity finding. Worth noting, but not necessarily harmful.
W011: Third-party content exposure detected (indirect prompt injection risk).
What this means
The skill exposes the agent to untrusted, user-generated content from public third-party sources, creating a risk of indirect prompt injection. This includes browsing arbitrary URLs, reading social media posts or forum comments, and analyzing content from unknown websites.
Why it was flagged
在 `scripts/download_subtitles.sh` 的运行路径中，会对运行时用户提供的任意 YouTube URL 执行 `yt-dlp` 获取公开字幕/自动字幕文件（可读文本 SRT/VTT），从而把“非操作用户”来源的自由文本间接喂入后续 `scripts/srt_to_transcript.py` 的清洗/转写结果；若此 transcript 再被写入 LLM 上下文，则构成典型的运行时外部内容注入风险。
- Repository
- digoal/blog
- Commit
3b9c83d
- Audited
- Security analysis
Is this your skill?
If you maintain this skill, you can claim it as your own. Once claimed, you can manage eval scenarios, bundle related skills, attach documentation or rules, and ensure cross-agent compatibility.