good-ask
给定一个行业，围绕该行业提出若干个"好问题"（只提问、不给答案，但每个问题要配"为什么这是个好问题"的理由）。触发条件：用户提到"帮我想几个好问题"、"这个行业有什么值得问的问题"、"帮我出选题"、"行业狗皮膏药问题"、"行业老大难问题"、"近期热点问题"、"帮我策划几个话题"、"这个行业值得深挖的问题有哪些"、"good ask"、"提问清单"，或者在准备写行业分析/公众号文章/辩论/调研之前想先找到几个真正值得问的问题。即使用户只说"帮我想想XX行业能问点啥"或"XX行业有哪些值得讨论的问题"，也应使用本 skill。本 skill 只产出问题和理由，不产出答案、不产出解决方案，如果用户还想要答案/深度分析，应在问题清单产出后提示可以用 multi-expert-analyzer、bug-hunter、red-blue-debate、industry-insight-writer 等 skill 继续深挖。
71
86%
Does it follow best practices?
Run evals on this skill
Adds up to 20 points to the overall score
View guide
Low
Low-risk findings worth noting
Low
Low-risk findings.
1 low severity finding. Worth noting, but not necessarily harmful.
W011: Third-party content exposure detected (indirect prompt injection risk).
What this means
The skill exposes the agent to untrusted, user-generated content from public third-party sources, creating a risk of indirect prompt injection. This includes browsing arbitrary URLs, reading social media posts or forum comments, and analyzing content from unknown websites.
Why it was flagged
该 skill 的“真实检索（web_search / web_fetch 深入阅读）”步骤会在运行时抓取公网页/外部新闻与页面正文作为材料，再把这些转述要点用于生成“理由”，因此存在将外部作者的自由文本经检索结果进入 LLM 上下文的间接提示注入风险。
- Repository
- digoal/blog
- Commit
3b9c83d
- Audited
- Security analysis
Is this your skill?
If you maintain this skill, you can claim it as your own. Once claimed, you can manage eval scenarios, bundle related skills, attach documentation or rules, and ensure cross-agent compatibility.