financial-report-analysis
Analyze company annual reports, quarterly reports, 10-K/10-Q filings, earnings releases, shareholder letters, or financial-report PDFs/URLs/files and produce a professional Chinese Markdown report for ordinary investors. Use when the user provides a company financial report address or local file and asks for 财报分析, 年报解读, 季报解读, 10-K/10-Q analysis, earnings analysis, investment reference, accounting red-flag detection, valuation discussion, or beginner-friendly explanation saved to the current project's markdown directory.
71
86%
Does it follow best practices?
Run evals on this skill
Adds up to 20 points to the overall score
View guide
Low
Low-risk findings worth noting
Low
Low-risk findings.
1 low severity finding. Worth noting, but not necessarily harmful.
W011: Third-party content exposure detected (indirect prompt injection risk).
What this means
The skill exposes the agent to untrusted, user-generated content from public third-party sources, creating a risk of indirect prompt injection. This includes browsing arbitrary URLs, reading social media posts or forum comments, and analyzing content from unknown websites.
Why it was flagged
SKILL.md 的运行流程要求“接受URL/HTML/文本/本地文件并提取内容、并用当前网络来源验证”，因此在步骤 1 的外部报告或外部网页正文会被读取为可读文本并进入 LLM 上下文，构成公网上抓取/外部文档的间接提示注入风险。
- Repository
- digoal/blog
- Commit
3b9c83d
- Audited
- Security analysis
Is this your skill?
If you maintain this skill, you can claim it as your own. Once claimed, you can manage eval scenarios, bundle related skills, attach documentation or rules, and ensure cross-agent compatibility.