state-trend-advisor
顺势而为，跟着国家走——抓取并分析国家五年规划、政策文件及重大新闻，结合询问者背景（擅长领域、特长、爱好），围绕"投资、创业方向、商业思路、产品思路、就业择业、学习规划"六大维度，生成逻辑严密、图文并茂、有数据支撑的战略分析报告，输出到项目 markdown/ 目录。 触发条件：用户提到"顺势而为"、"跟着国家走"、"国家政策方向"、"五年规划"、"赚政策的钱"、"走在趋势上"、"政策红利"、"国家扶持"、"政策风口"、"应该往哪个方向走"、"未来哪些行业有前途"、"政策支持什么方向"、"国家在推什么"，或者用户描述自己的背景/特长并询问未来发展方向时，必须使用本 skill。 即使用户只说"我擅长XX，应该往哪里走"或"现在创业方向怎么选"，也应使用本 skill。
69
85%
Does it follow best practices?
Run evals on this skill
Adds up to 20 points to the overall score
View guide
Low
Low-risk findings worth noting
Low
Low-risk findings.
1 low severity finding. Worth noting, but not necessarily harmful.
W011: Third-party content exposure detected (indirect prompt injection risk).
What this means
The skill exposes the agent to untrusted, user-generated content from public third-party sources, creating a risk of indirect prompt injection. This includes browsing arbitrary URLs, reading social media posts or forum comments, and analyzing content from unknown websites.
Why it was flagged
Step 2/2.1–2.2 requires using `web_search` and then `web_fetch` to retrieve policy/trend pages from the public web (e.g., arbitrary gov.cn/新华社/其他网站 URLs), and that fetched free-form page text would be ingested into the agent’s LLM context, creating an indirect prompt-injection exposure path.
- Repository
- digoal/blog
- Commit
3b9c83d
- Audited
- Security analysis
Is this your skill?
If you maintain this skill, you can claim it as your own. Once claimed, you can manage eval scenarios, bundle related skills, attach documentation or rules, and ensure cross-agent compatibility.