nsfc-qc
当用户明确要求"标书QC/质量控制/润色前质检/引用真伪核查/篇幅与结构检查"时使用。对 NSFC 标书进行只读质量控制：并行多线程独立检查文风生硬、引用假引/错引风险、篇幅与章节分布、逻辑清晰度等，最终输出标准化 QC 报告；中间文件默认归档到 `project_root/.bensz-api/task-{yyyymmdd-hhmm}-{简短描述}/nsfc-qc/{yyyy-mm-dd-hh-mm}/`，并兼容 legacy `.nsfc-qc/` 读取/清理。
67
82%
Does it follow best practices?
Run evals on this skill
Adds up to 20 points to the overall score
View guide
Low
Low-risk findings worth noting
Low
Low-risk findings.
1 low severity finding. Worth noting, but not necessarily harmful.
W011: Third-party content exposure detected (indirect prompt injection risk).
What this means
The skill exposes the agent to untrusted, user-generated content from public third-party sources, creating a risk of indirect prompt injection. This includes browsing arbitrary URLs, reading social media posts or forum comments, and analyzing content from unknown websites.
Why it was flagged
RUNTIME path: `scripts/nsfc_qc_precheck.py` fetches outsider-authored web/API text (Crossref/arXiv/Unpaywall responses and optional OA PDF excerpts) and writes them into `artifacts/reference_evidence.jsonl`, which is then copied into the LLM-visible evidence bundle `./.bensz-api/skills/nsfc-qc/input/reference_evidence.jsonl` and consumed by parallel-vibe threads in `scripts/run_parallel_qc.py` (prompt includes `reference_evidence.jsonl`).
- Repository
- huangwb8/ChineseResearchLaTeX
- Commit
01044a6
- Audited
- Security analysis
Is this your skill?
If you maintain this skill, you can claim it as your own. Once claimed, you can manage eval scenarios, bundle related skills, attach documentation or rules, and ensure cross-agent compatibility.