bestblogs-topic
Use this skill when the user asks about a specific topic, subject area, or wants to explore curated topic pages on BestBlogs. Triggers include "BestBlogs 有什么主题 / 查一下 AI 编程主题 / 给我看 Claude 主题页 / 大模型相关主题", "BestBlogs topic list", "show me topics about AI", "what topics does BestBlogs have", "topic details for vibe-coding", "browse topic pages". Invokes the `bestblogs` CLI.
80
100%
Does it follow best practices?
Run evals on this skill
Adds up to 20 points to the overall score
View guide
Low
Low-risk findings worth noting
Low
Low-risk findings.
1 low severity finding. Worth noting, but not necessarily harmful.
W011: Third-party content exposure detected (indirect prompt injection risk).
What this means
The skill exposes the agent to untrusted, user-generated content from public third-party sources, creating a risk of indirect prompt injection. This includes browsing arbitrary URLs, reading social media posts or forum comments, and analyzing content from unknown websites.
Why it was flagged
SKILL.md 的 required workflow 通过调用 `bestblogs topics list/get ... --json` 获取主题与其 `summary`、`eventContent/domainContent/...`、以及 `furtherReadingResources` 等字段的**外部站点/第三方 API 返回文本**并在代理执行过程中进入 LLM 上下文，从而存在“公共内容/他人撰写内容”导致的间接提示注入风险。
- Repository
- ginobefun/BestBlogs
- Commit
756ffbd
- Audited
- Security analysis
Is this your skill?
If you maintain this skill, you can claim it as your own. Once claimed, you can manage eval scenarios, bundle related skills, attach documentation or rules, and ensure cross-agent compatibility.