good-ask
给定一个行业（如新能源汽车、预制菜、少儿编程、殡葬、货运物流），提出若干个"好问题"——不作解答，但给出扎实理由。好问题指行业老大难或近期热点、真实不虚构、牵连广泛、深刻难解、够得着有解法、且有讨论张力。当用户说"针对X行业提几个好问题""这个行业有哪些值得深挖的真问题""帮我找选题/议题/讨论话题""这行的痛点/争议是什么"时使用本技能。
76
93%
Does it follow best practices?
Run evals on this skill
Adds up to 20 points to the overall score
View guide
Low
Low-risk findings worth noting
Low
Low-risk findings.
1 low severity finding. Worth noting, but not necessarily harmful.
W011: Third-party content exposure detected (indirect prompt injection risk).
What this means
The skill exposes the agent to untrusted, user-generated content from public third-party sources, creating a risk of indirect prompt injection. This includes browsing arbitrary URLs, reading social media posts or forum comments, and analyzing content from unknown websites.
Why it was flagged
SKILL.md 的 Step 2 明确进行“采集真实信号（强制联网核实）”，通过运行时调用 `mcp__MiniMax__web_search` 获取网页/搜索结果文本，属于“公共 web 内容在运行时被读取并喂入 LLM 上下文”的外部来源，从而存在间接提示注入风险。
- Repository
- digoal/blog
- Commit
3b9c83d
- Audited
- Security analysis
Is this your skill?
If you maintain this skill, you can claim it as your own. Once claimed, you can manage eval scenarios, bundle related skills, attach documentation or rules, and ensure cross-agent compatibility.