ljg-mechanism
针对用户提供的现象，用「看反常—追过程—分解释—带条件迁移」生成机制猜想，并联网核对现象、检验关键因果与竞争解释，交付证据最能支撑的机制及其边界。USE WHEN 用户调用 ljg-mechanism、说「找机制」「机制研究」「用四步框架走一遍」「联网验证这个解释」，或希望研究一个现象怎样发生。NOT FOR 纯概念定义、普通摘要、已有唯一解的操作题或只画地图。
64
80%
Does it follow best practices?
Run evals on this skill
Adds up to 20 points to the overall score
Low
Low-risk findings worth noting
Fix and improve this skill with Tessl
tessl review fix ./skills/ljg-mechanism/SKILL.mdW011: Third-party content exposure detected (indirect prompt injection risk).
What this means
The skill exposes the agent to untrusted, user-generated content from public third-party sources, creating a risk of indirect prompt injection. This includes browsing arbitrary URLs, reading social media posts or forum comments, and analyzing content from unknown websites.
Why it was flagged
The workflow utilizes web search and content retrieval capabilities (`DiscoverMechanism.md` step 0/iii) to investigate user-provided phenomena and external materials, which exposes the agent to outsider-authored free text from web pages at runtime.
- Repository
- lijigang/ljg-skills
- Commit
7449831
- Audited
- Security analysis
Is this your skill?
If you maintain this skill, you can claim it as your own. Once claimed, you can manage eval scenarios, bundle related skills, attach documentation or rules, and ensure cross-agent compatibility.