complete-example
当用户明确要求"填充示例内容""生成示例""补充 LaTeX 示例"时使用。AI 增强版 LaTeX 示例智能生成器，实现 AI 与硬编码的有机融合：AI 做"语义理解"（分析章节主题、推理资源相关性、生成连贯叙述），硬编码做"结构保护"（格式验证、哈希校验、访问控制）。
67
82%
Does it follow best practices?
Run evals on this skill
Adds up to 20 points to the overall score
View guide
Low
Low-risk findings worth noting
Low
Low-risk findings.
1 low severity finding. Worth noting, but not necessarily harmful.
W011: Third-party content exposure detected (indirect prompt injection risk).
What this means
The skill exposes the agent to untrusted, user-generated content from public third-party sources, creating a risk of indirect prompt injection. This includes browsing arbitrary URLs, reading social media posts or forum comments, and analyzing content from unknown websites.
Why it was flagged
该 skill 在运行时会读取项目内的 LaTeX/代码/参考文献等“用户未选择引入其文本”的内容（如 `extraTex/*.tex`、`figures/code/references` 下文件内容）并把它们拼进 AI 提示词中的 `{tex_content}`、`{context}`、`{resources}`、`metadata` 等字段，从而形成对抗注入载体；尽管这些内容来自“用户项目文件”，但在本题定义下它们属于操作用户未显式选择引入到提示中的潜在外部自由文本源。
- Repository
- huangwb8/ChineseResearchLaTeX
- Commit
01044a6
- Audited
- Security analysis
Is this your skill?
If you maintain this skill, you can claim it as your own. Once claimed, you can manage eval scenarios, bundle related skills, attach documentation or rules, and ensure cross-agent compatibility.