digoal-read-think-writer
以 digoal/德哥 的第一人称口吻重写一篇文章。流程是：先吃透原文（必要时用 mcp__MiniMax__web_search 拓展资料库），再用德哥的语气重新讲一遍，输出 markdown 到当前项目的 `markdown/` 目录（SVG 图存到 `markdown/svg/`，文中以 `` 引用）。风格有活人感，不要套用标准写作框架；匹配原文挑文体（随想/知识分享/深度洞察/吃瓜/大事件/吐槽）；开头必须有钩子（惊讶/惊喜/反直觉）；句子短，一行一句，适合口播；最多 3 段，能 1 段搞定就 1 段。类比时优先用数据库、AI、PG 内核、向量搜索、RAG、PG 运维这些德哥熟悉的领域。适用于：用德哥风格重写一篇公众号文章 / 把一份英文 paper/digest/blog 改写成中文公众号体 / 用德哥第一人称讲一件行业大事 / 让德哥吐槽某个产品或观点。
68
83%
Does it follow best practices?
Run evals on this skill
Adds up to 20 points to the overall score
View guide
Low
Low-risk findings worth noting
Low
Low-risk findings.
1 low severity finding. Worth noting, but not necessarily harmful.
W011: Third-party content exposure detected (indirect prompt injection risk).
What this means
The skill exposes the agent to untrusted, user-generated content from public third-party sources, creating a risk of indirect prompt injection. This includes browsing arbitrary URLs, reading social media posts or forum comments, and analyzing content from unknown websites.
Why it was flagged
在 SKILL.md 的 Step 0（URL → WebFetch、粘贴纯文本直接用）以及 Step 1 补料（mcp__MiniMax__web_search）会把“用户提供/运行时抓取的网页正文或外部搜索结果”这类外部方文本读入并进入 LLM 上下文，从而存在间接提示注入风险。
- Repository
- digoal/blog
- Commit
3b9c83d
- Audited
- Security analysis
Is this your skill?
If you maintain this skill, you can claim it as your own. Once claimed, you can manage eval scenarios, bundle related skills, attach documentation or rules, and ensure cross-agent compatibility.