industry-deep-explainer
系统性'讲透'一个行业的深度分析技能。覆盖产业链分布、利润分布、代表企业、人货场、供需连接, 并推演不合理点、机会点、入局策略(产品/客群/商业模式/定价)、竞争对手与合作伙伴。触发场景: 讲透/分析XX行业、XX产业链、XX行业机会、如何进入XX行业、XX赛道分析、我想做XX怎么切入等。输出图文并茂的深度分析报告到当前项目 markdown/ 目录。
73
90%
Does it follow best practices?
Run evals on this skill
Adds up to 20 points to the overall score
View guide
Low
Low-risk findings worth noting
Low
Low-risk findings.
1 low severity finding. Worth noting, but not necessarily harmful.
W011: Third-party content exposure detected (indirect prompt injection risk).
What this means
The skill exposes the agent to untrusted, user-generated content from public third-party sources, creating a risk of indirect prompt injection. This includes browsing arbitrary URLs, reading social media posts or forum comments, and analyzing content from unknown websites.
Why it was flagged
SKILL.md Step 2 要求运行时联网使用 `mcp__MiniMax__web_search` 搜索并读取公开网页/来源的文本内容，再把这些检索结果融入后续“六维分析/推演/输出”阶段进入 LLM，上述属于公共网页/第三方内容（outsider-authored free text）的间接提示注入风险路径。
- Repository
- digoal/blog
- Commit
3b9c83d
- Audited
- Security analysis
Is this your skill?
If you maintain this skill, you can claim it as your own. Once claimed, you can manage eval scenarios, bundle related skills, attach documentation or rules, and ensure cross-agent compatibility.