financial-report-analyst
深度解读企业财报，将财报 PDF 或 URL 转化为面向普通投资者的专业分析报告，以 Markdown 格式保存到当前项目的 markdown/ 目录。 触发条件：用户上传或提供财报 PDF、提到"分析财报"/"读财报"/"解读财报"/"看看这家公司"/"帮我分析一下 XX 公司"，或任何需要深入理解一份财务报告的场景。 输出一份犀利、有逻辑支撑的投资参考报告，涵盖：核心收入分析、财务健康诊断、隐蔽风险雷区排查、行业竞争格局、前瞻性估值，以及明确的投资参考建议。 即使用户只说"帮我看这份年报"但内容是财报，也应使用本 skill。
67
80%
Does it follow best practices?
Run evals on this skill
Adds up to 20 points to the overall score
View guide
Low
Low-risk findings worth noting
Fix and improve this skill with Tessl
tessl review fix ./skills/skills_for_claude_web/financial-report-analyst/SKILL.mdLow
Low-risk findings.
1 low severity finding. Worth noting, but not necessarily harmful.
W011: Third-party content exposure detected (indirect prompt injection risk).
What this means
The skill exposes the agent to untrusted, user-generated content from public third-party sources, creating a risk of indirect prompt injection. This includes browsing arbitrary URLs, reading social media posts or forum comments, and analyzing content from unknown websites.
Why it was flagged
SKILL.md 的 Step 0 允许用户提供任意 URL 时通过 `web_fetch` 抓取网页/SEC/港交所/巨潮等内容，并将其作为“财报原始文件/正文”用于 Step 1 的读取与后续分析，因此运行时会把可能包含外部撰写的自由文本（网页抓取内容）喂入 LLM 上下文。
- Repository
- digoal/blog
- Commit
3b9c83d
- Audited
- Security analysis
Is this your skill?
If you maintain this skill, you can claim it as your own. Once claimed, you can manage eval scenarios, bundle related skills, attach documentation or rules, and ensure cross-agent compatibility.