investor-news-impact
面向投资者的近 3 天新闻抓取与影响分析技能。触发场景 - 用户要求「抓取最近新闻」「生成投研日报」「分析新闻对 XX 行业或公司的影响」「今天或最近有什么重要新闻」时启用。若用户提供行业名则只抓该行业, 否则并发抓取「中美关系、地缘局势、美联储、民生数据、高科技、生物医疗、云计算产业、AI 产业链」8 个默认主题, 按分类总结, 推演对行业和上市公司的影响, 图文并茂输出到当前项目 markdown 目录。
69
85%
Does it follow best practices?
Run evals on this skill
Adds up to 20 points to the overall score
View guide
Low
Low-risk findings worth noting
Low
Low-risk findings.
1 low severity finding. Worth noting, but not necessarily harmful.
W011: Third-party content exposure detected (indirect prompt injection risk).
What this means
The skill exposes the agent to untrusted, user-generated content from public third-party sources, creating a risk of indirect prompt injection. This includes browsing arbitrary URLs, reading social media posts or forum comments, and analyzing content from unknown websites.
Why it was flagged
技能在 Step 1 运行时通过 `mcp__MiniMax__web_search` 抓取“公开网页/新闻”内容并将其摘要、分类与推演到 LLM上下文中，属于公网上运行时获取的外部自由文本注入风险。
- Repository
- digoal/blog
- Commit
3b9c83d
- Audited
- Security analysis
Is this your skill?
If you maintain this skill, you can claim it as your own. Once claimed, you can manage eval scenarios, bundle related skills, attach documentation or rules, and ensure cross-agent compatibility.