finance-weekly-outlook
基于 daily-finance 和 finance-core-analysis 的产出，综合搜索权威市场数据（量价、资金流、VIX、北向、期权持仓、机构配置等），运用三因子定价模型和预期差框架，生成未来一周中美股市看涨/看空行业和个股的深度预测报告，包含明确操盘建议（买卖点、分段持仓、行动指南）。触发条件：用户提到"下周行情预测"、"下周看多看空"、"下周操盘"、"周报"、"未来一周"、"哪些股票值得关注"、"帮我选股"、"下周买什么"，或要求结合宏观与个股给出具体操盘建议时，必须使用本 skill。即使用户只说"帮我分析一下下周市场"或"有没有好的投资机会"，也应使用本 skill。这是 daily-finance → finance-core-analysis → finance-weekly-outlook 管线的第三步，也可以独立触发。
75
92%
Does it follow best practices?
Run evals on this skill
Adds up to 20 points to the overall score
View guide
Low
Low-risk findings worth noting
Low
Low-risk findings.
1 low severity finding. Worth noting, but not necessarily harmful.
W011: Third-party content exposure detected (indirect prompt injection risk).
What this means
The skill exposes the agent to untrusted, user-generated content from public third-party sources, creating a risk of indirect prompt injection. This includes browsing arbitrary URLs, reading social media posts or forum comments, and analyzing content from unknown websites.
Why it was flagged
SKILL.md要求在找不到本地/上一步产出时“通过搜索工具构建输入”（Step 1/输入处理第3-4点），而运行时的搜索所抓取网页属于“公共 web 内容/外部来源”，可把其自由文本读入LLM上下文形成间接提示注入风险。
- Repository
- digoal/blog
- Commit
3b9c83d
- Audited
- Security analysis
Is this your skill?
If you maintain this skill, you can claim it as your own. Once claimed, you can manage eval scenarios, bundle related skills, attach documentation or rules, and ensure cross-agent compatibility.