twmd-spore-publish
Daily auto-publish spore from SPORE-INBOX via canonical SPORE-PUBLISH-PIPELINE — pick high-quality entry → 4 hard gate → ship Threads + X → 復盤. Routine fires 10:00 daily; manual via "/twmd-spore-publish" or "發今天的孢子" or "跑 spore publish". TRIGGER when: routine twmd-spore-publish-daily fires / user says "跑 spore publish" / "發今天的孢子" / "從 SPORE-INBOX 選一篇 ship".
Low
Low-risk findings.
1 low severity finding. Worth noting, but not necessarily harmful.
W011: Third-party content exposure detected (indirect prompt injection risk).
What this means
The skill exposes the agent to untrusted, user-generated content from public third-party sources, creating a risk of indirect prompt injection. This includes browsing arbitrary URLs, reading social media posts or forum comments, and analyzing content from unknown websites.
Why it was flagged
SKILL.md’s required runtime workflow reads candidate entries from SPORE-INBOX §Pending (Stage 1 SELECT) and then loads SPORE-WRITING/Ack (Stage 3), meaning outsider-authored free text can be ingested via the monitored inbox queue without “selecting a specific item” beyond choosing a pending candidate.
- Repository
- frank890417/taiwan-md
- Commit
4d66426
- Audited
- Security analysis
Is this your skill?
If you maintain this skill, you can claim it as your own. Once claimed, you can manage eval scenarios, bundle related skills, attach documentation or rules, and ensure cross-agent compatibility.