enterprise-future-planning-advisor
基于用户提供的企业名、企业简介、公司网站、产品信息、财报或访谈材料，搜索当前公开资料并生成企业画像、未来规划与建议书。Use when the user asks for 企业未来规划、公司战略建议书、企业画像、行业/赛道/场景分析、商业机会挖掘、客户付费痛点、产品原型、MVP、团队组建、变现路径、转型增长方案, and wants a source-backed Chinese Markdown report saved under the current project's markdown directory.
72
89%
Does it follow best practices?
Run evals on this skill
Adds up to 20 points to the overall score
View guide
Low
Low-risk findings worth noting
Low
Low-risk findings.
1 low severity finding. Worth noting, but not necessarily harmful.
W011: Third-party content exposure detected (indirect prompt injection risk).
What this means
The skill exposes the agent to untrusted, user-generated content from public third-party sources, creating a risk of indirect prompt injection. This includes browsing arbitrary URLs, reading social media posts or forum comments, and analyzing content from unknown websites.
Why it was flagged
SKILL.md 的运行流程要求在步骤1“Build the evidence base”中“Search the web … Record source links…”, which at runtime implies fetching and ingesting public web pages/articles as free text into the agent’s LLM context (a classic public-web-content outsider source via runtime browsing/scraping).
- Repository
- digoal/blog
- Commit
3b9c83d
- Audited
- Security analysis
Is this your skill?
If you maintain this skill, you can claim it as your own. Once claimed, you can manage eval scenarios, bundle related skills, attach documentation or rules, and ensure cross-agent compatibility.