enterprise-planner
为企业生成深度未来规划与建议书。输入企业名称、简介、网站等基本信息，自动搜索企业相关情报、行业数据、竞争格局，构建完整企业画像，再结合当下环境与未来趋势，输出图文并茂、有数据支撑的战略规划报告（Markdown 格式），保存到当前项目的 markdown/ 目录。触发条件：用户提供企业信息并希望获得规划建议、提到"企业规划"、"帮这家公司规划"、"战略建议书"、"商业计划"、"给XX公司写规划"、"公司未来怎么走"、"帮我分析一下这家企业"。即使用户只说"帮我给这家公司写个规划"但附带了企业信息，也应使用本 skill。
68
83%
Does it follow best practices?
Run evals on this skill
Adds up to 20 points to the overall score
View guide
Low
Low-risk findings worth noting
Low
Low-risk findings.
1 low severity finding. Worth noting, but not necessarily harmful.
W011: Third-party content exposure detected (indirect prompt injection risk).
What this means
The skill exposes the agent to untrusted, user-generated content from public third-party sources, creating a risk of indirect prompt injection. This includes browsing arbitrary URLs, reading social media posts or forum comments, and analyzing content from unknown websites.
Why it was flagged
SKILL.md:21-49 requires runtime `web_search` and `web_fetch` to retrieve public web pages (including full page bodies when a user provides a URL), which would feed outsider-authored free-form text into the agent’s LLM context.
- Repository
- digoal/blog
- Commit
3b9c83d
- Audited
- Security analysis
Is this your skill?
If you maintain this skill, you can claim it as your own. Once claimed, you can manage eval scenarios, bundle related skills, attach documentation or rules, and ensure cross-agent compatibility.