product-review-report
编写产品评测报告的 skill。流程：询问被评测产品名、资料/链接、评测功能点、目标使用场景、竞品 → 网络核实最新状态 → 站在决策者（买不买）和使用者（好不好用）双视角 → 输出图文并茂的 markdown 评测报告到当前项目的 markdown/ 目录。报告包含：TL;DR、双视角结论、维度评分、竞品对比、选型决策树、实操指南、依据与参考。适用于"评测 XX 产品"、"对比 X 和 Y"、"XX 工具选型"等需求。
68
84%
Does it follow best practices?
Run evals on this skill
Adds up to 20 points to the overall score
View guide
Low
Low-risk findings worth noting
Low
Low-risk findings.
1 low severity finding. Worth noting, but not necessarily harmful.
W011: Third-party content exposure detected (indirect prompt injection risk).
What this means
The skill exposes the agent to untrusted, user-generated content from public third-party sources, creating a risk of indirect prompt injection. This includes browsing arbitrary URLs, reading social media posts or forum comments, and analyzing content from unknown websites.
Why it was flagged
该 skill 的运行流程要求在 Step 2 用 `mcp__MiniMax__web_search` 搜索并纳入“真实用户反馈/公开 benchmark/竞品最新动态”等结果，属于运行时抓取的公共网页/第三方内容（outsider-authored free text）进入 LLM 上下文的路径。
- Repository
- digoal/blog
- Commit
3b9c83d
- Audited
- Security analysis
Is this your skill?
If you maintain this skill, you can claim it as your own. Once claimed, you can manage eval scenarios, bundle related skills, attach documentation or rules, and ensure cross-agent compatibility.