us-stock-predictor
预测美股个股次日走势，输出图文并茂的 Markdown 分析报告（含逻辑推导、中间结果、概率量化、操作建议）。触发条件：用户输入美股股票名称或代码，并希望获得次日走势预测；关键词包括"预测明天走势"、"明天能涨吗"、"帮我分析一下XX股票"、"明天该买吗"、"次日预测"、"做T建议"、"短线操作"、"明日行情"、"值得持有吗"等。即使用户只说"帮我看看NVDA明天怎么走"或"AAPL明天能不能买"，也应使用本 skill。输出 Markdown 文件保存到当前项目 markdown/ 目录，要求逻辑清晰、概率可量化、图文并茂，投资小白也能看懂。
66
79%
Does it follow best practices?
Run evals on this skill
Adds up to 20 points to the overall score
View guide
Low
Low-risk findings worth noting
Fix and improve this skill with Tessl
tessl review fix ./skills/skills_for_claude_web/us-stock-predictor/SKILL.mdLow
Low-risk findings.
1 low severity finding. Worth noting, but not necessarily harmful.
W011: Third-party content exposure detected (indirect prompt injection risk).
What this means
The skill exposes the agent to untrusted, user-generated content from public third-party sources, creating a risk of indirect prompt injection. This includes browsing arbitrary URLs, reading social media posts or forum comments, and analyzing content from unknown websites.
Why it was flagged
The required workflow in SKILL.md Step 2 (“多线搜索” for news/analyst/earnings/options/sentiment) implies fetching and incorporating third-party web/news content at runtime (outsider-authored free text) into the agent’s LLM reasoning for Step 3/Step 4.
- Repository
- digoal/blog
- Commit
3b9c83d
- Audited
- Security analysis
Is this your skill?
If you maintain this skill, you can claim it as your own. Once claimed, you can manage eval scenarios, bundle related skills, attach documentation or rules, and ensure cross-agent compatibility.