industry-insight-writer
以第三方中立研究顾问身份，围绕某个行业近1个月内的最新动态，撰写适合公众号发布的简短深度文章（不超过4屏手机阅读）。触发条件：用户输入行业名称并希望生成行业洞察文章，提到"帮我写篇XX行业的文章"、"分析一下XX行业最近的动态"、"以顾问角度写XX"、"行业观察"、"行业跟踪"、"行业洞察"、"帮我写XX行业报告"、"XX行业近期发展"等。即使用户只说"帮我写一篇关于XX行业的文章"，只要意图是行业评析，也应使用本 skill。输出为 Markdown 文件，保存到当前项目 markdown/ 目录，适合手机端阅读，第一人称，中立有据，无AI生成痕迹。
72
88%
Does it follow best practices?
Run evals on this skill
Adds up to 20 points to the overall score
View guide
Low
Low-risk findings worth noting
Low
Low-risk findings.
1 low severity finding. Worth noting, but not necessarily harmful.
W011: Third-party content exposure detected (indirect prompt injection risk).
What this means
The skill exposes the agent to untrusted, user-generated content from public third-party sources, creating a risk of indirect prompt injection. This includes browsing arbitrary URLs, reading social media posts or forum comments, and analyzing content from unknown websites.
Why it was flagged
Step 1 instructs using the runtime `web_search` tool to fetch and summarize recent news (public web content authored by outsiders), whose retrieved text (“标题 + 核心事实 + 时间”) is then fed into Step 2 for insight extraction, creating indirect prompt-injection exposure.
- Repository
- digoal/blog
- Commit
3b9c83d
- Audited
- Security analysis
Is this your skill?
If you maintain this skill, you can claim it as your own. Once claimed, you can manage eval scenarios, bundle related skills, attach documentation or rules, and ensure cross-agent compatibility.