write-mrd
输入一个产品 idea（一句话或详细描述均可），自动生成图文并茂、结构完整的 MRD（市场需求文档），以 Markdown 格式保存到当前项目 markdown/ 目录，同时输出配套 SVG 图表文件。触发条件：用户提到"写 MRD"、"帮我写市场需求文档"、"生成 MRD"、"写产品市场需求"、"我有个产品想法"、"帮我把这个 idea 写成 MRD"、"市场需求文档模板"、"产品立项文档"、"帮我写需求文档"。即使用户只给出一句简短的产品描述如"我想做一个 XX 产品"，也应立即使用本 skill 生成 MRD。本 skill 面向产品经理、创业者、产品负责人，输出可直接用于团队评审和立项决策的专业文档。
66
80%
Does it follow best practices?
Run evals on this skill
Adds up to 20 points to the overall score
View guide
Low
Low-risk findings worth noting
Low
Low-risk findings.
1 low severity finding. Worth noting, but not necessarily harmful.
W011: Third-party content exposure detected (indirect prompt injection risk).
What this means
The skill exposes the agent to untrusted, user-generated content from public third-party sources, creating a risk of indirect prompt injection. This includes browsing arbitrary URLs, reading social media posts or forum comments, and analyzing content from unknown websites.
Why it was flagged
SKILL.md 第14-46行要求 Step 2 进行“web search”，其运行时抓取/浏览器抽取的网页正文属于公共网站的外部自由文本，并会被送入LLM上下文用于生成 MRD，从而构成间接提示注入风险。
- Repository
- digoal/blog
- Commit
3b9c83d
- Audited
- Security analysis
Is this your skill?
If you maintain this skill, you can claim it as your own. Once claimed, you can manage eval scenarios, bundle related skills, attach documentation or rules, and ensure cross-agent compatibility.