douban-book-notes
Generate a source-backed, shareable Chinese Markdown reading note from a Douban book URL. Use when the user provides a Douban book link and asks for 读书笔记, book notes, book summary, reading reflection, 图文并茂笔记, or a Markdown article that combines book metadata, high-quality external research, the author's argument, evidence, logic, assumptions, insights, transferability, and personal reflection saved under the current project's markdown directory.
71
86%
Does it follow best practices?
Run evals on this skill
Adds up to 20 points to the overall score
View guide
Low
Low-risk findings worth noting
Low
Low-risk findings.
1 low severity finding. Worth noting, but not necessarily harmful.
W011: Third-party content exposure detected (indirect prompt injection risk).
What this means
The skill exposes the agent to untrusted, user-generated content from public third-party sources, creating a risk of indirect prompt injection. This includes browsing arbitrary URLs, reading social media posts or forum comments, and analyzing content from unknown websites.
Why it was flagged
SKILL.md 的运行流程要求“在第2步搜索网络并阅读所选材料(网页/文章等)”以及“第12步阅读书籍公开元数据与选定材料”，因此会在运行时把他人/外部网页或评论等自由文本（可能含提示注入）读入并进入 LLM 上下文，属于公共网页抓取/浏览类的 outsider 来源。
- Repository
- digoal/blog
- Commit
3b9c83d
- Audited
- Security analysis
Is this your skill?
If you maintain this skill, you can claim it as your own. Once claimed, you can manage eval scenarios, bundle related skills, attach documentation or rules, and ensure cross-agent compatibility.