industry-chain-analyst
以资深投行分析师的视角，输入一个行业或产业名称，系统梳理该行业产业链各节点，列出各节点代表性上市公司，深度分析商业模式、上下游关系、核心竞争力、护城河、风险揭露、竞争格局等，用通俗易懂的语言面向普通投资人输出图文并茂的Markdown报告，保存到当前项目 markdown/ 目录。触发条件：用户提到"产业链分析"、"帮我分析XX行业"、"XX行业上下游"、"XX行业有哪些上市公司"、"XX行业怎么投"、"XX行业竞争格局"、"XX行业护城河"、"XX行业风险"、"梳理XX产业链"、"XX上下游企业"等。即使用户只说"帮我看看XX行业"或"XX行业值得投吗"，也应使用本skill。输出为Markdown文件，保存到markdown/目录，图文并茂，语言专业但通俗，适合普通投资人阅读。
69
83%
Does it follow best practices?
Run evals on this skill
Adds up to 20 points to the overall score
View guide
Low
Low-risk findings worth noting
Low
Low-risk findings.
1 low severity finding. Worth noting, but not necessarily harmful.
W011: Third-party content exposure detected (indirect prompt injection risk).
What this means
The skill exposes the agent to untrusted, user-generated content from public third-party sources, creating a risk of indirect prompt injection. This includes browsing arbitrary URLs, reading social media posts or forum comments, and analyzing content from unknown websites.
Why it was flagged
SKILL.md 的 Step 2（“使用 web_search 执行 5～7 次精准搜索…优先抓取券商研报摘要、行业协会数据、上市公司财报、权威财经媒体报道”）会在运行时把公网上检索到的网页/研报摘要等“外部自由文本”读入LLM上下文，从而存在间接提示注入风险。
- Repository
- digoal/blog
- Commit
3b9c83d
- Audited
- Security analysis
Is this your skill?
If you maintain this skill, you can claim it as your own. Once claimed, you can manage eval scenarios, bundle related skills, attach documentation or rules, and ensure cross-agent compatibility.