investor-news-impact
面向投资者，抓取最近3天内指定行业或默认主题（中美关系、地缘局势、美联储、民生数据、高科技、生物医疗、云计算产业、AI产业链）的新闻，按分类汇总摘要，给出投资者全面总结，并推演对行业和上市公司的影响（逻辑清晰、有历史数据/事件支撑、图文并茂），输出 Markdown 文件到当前项目 markdown/ 目录。 触发条件：用户提到"新闻影响分析"、"投资者新闻"、"最近新闻对哪些股票有影响"、"抓取新闻做投资分析"、"新闻推演"、"帮我看看最近新闻对投资的影响"、"行业新闻影响"、"最近有什么值得关注的新闻"、"最近3天新闻"、"新闻对上市公司的影响"等。即使用户只说"帮我分析一下最近的新闻"或"最近有什么大事影响投资"，也应使用本 skill。若用户提供了具体行业名，以用户指定行业为准；否则默认抓取中美关系、地缘局势、美联储、民生数据、高科技、生物医疗、云计算、AI产业链相关新闻。
69
85%
Does it follow best practices?
Run evals on this skill
Adds up to 20 points to the overall score
View guide
Low
Low-risk findings worth noting
Low
Low-risk findings.
1 low severity finding. Worth noting, but not necessarily harmful.
W011: Third-party content exposure detected (indirect prompt injection risk).
What this means
The skill exposes the agent to untrusted, user-generated content from public third-party sources, creating a risk of indirect prompt injection. This includes browsing arbitrary URLs, reading social media posts or forum comments, and analyzing content from unknown websites.
Why it was flagged
SKILL.md 的 Step 1/2 要求在运行时“搜索最近3天新闻”并对“每条搜索结果”进行筛选汇总，这意味着从外部新闻网页/来源抓取的正文或摘要（他人撰写的内容）会被读入并进入后续 LLM 生成上下文，从而存在间接提示注入风险。
- Repository
- digoal/blog
- Commit
3b9c83d
- Audited
- Security analysis
Is this your skill?
If you maintain this skill, you can claim it as your own. Once claimed, you can manage eval scenarios, bundle related skills, attach documentation or rules, and ensure cross-agent compatibility.