research-topic-extractor
当用户明确要求"从文件/图片/网页/描述中提取综述主题"、"生成主题+关键词+核心问题结构化输出"，或要求使用旧名 get-review-theme skill 时使用。支持文件（PDF/Word/Markdown/Tex）、文件夹、图片、自然语言描述、网页 URL 等多种输入源，自动识别输入类型并提取内容，生成可直接用于 research-literature-review 及其他文献综述技能的结构化输出。
52
58%
Does it follow best practices?
Run evals on this skill
Adds up to 20 points to the overall score
View guide
Low
Low-risk findings worth noting
Fix and improve this skill with Tessl
tessl review fix ./skills/research-topic-extractor/SKILL.mdLow
Low-risk findings.
1 low severity finding. Worth noting, but not necessarily harmful.
W011: Third-party content exposure detected (indirect prompt injection risk).
What this means
The skill exposes the agent to untrusted, user-generated content from public third-party sources, creating a risk of indirect prompt injection. This includes browsing arbitrary URLs, reading social media posts or forum comments, and analyzing content from unknown websites.
Why it was flagged
SKILL.md:60-62/62-63 描述运行时会从用户提供的 URL/文件夹中读取并递归合并网页或文件正文（这类内容可能包含他人撰写的自由文本，属于“public web content fetched at runtime”或“outsider-authored documents”），从而进入 LLM 上下文进行语义提取。
- Repository
- huangwb8/ChineseResearchLaTeX
- Commit
01044a6
- Audited
- Security analysis
Is this your skill?
If you maintain this skill, you can claim it as your own. Once claimed, you can manage eval scenarios, bundle related skills, attach documentation or rules, and ensure cross-agent compatibility.