ljg-paper
Paper reader for non-academics. Reconstructs a paper on three independent axes: the reader can identify its research problem and product, experience the evidence-driven change in understanding, and rebuild the mechanism, central experiment, and boundary. USE WHEN the user shares an arXiv link, paper URL, PDF, local paper, paper title, or asks to read, explain, analyze, or understand a paper. Defaults to a saved Org note. NOT FOR reproduction, formal peer review, benchmark tables, or literature surveys.
63
74%
Does it follow best practices?
Run evals on this skill
Adds up to 20 points to the overall score
View guide
Low
Low-risk findings worth noting
Fix and improve this skill with Tessl
tessl review fix ./skills/ljg-paper/SKILL.mdLow
Low-risk findings.
1 low severity finding. Worth noting, but not necessarily harmful.
W011: Third-party content exposure detected (indirect prompt injection risk).
What this means
The skill exposes the agent to untrusted, user-generated content from public third-party sources, creating a risk of indirect prompt injection. This includes browsing arbitrary URLs, reading social media posts or forum comments, and analyzing content from unknown websites.
Why it was flagged
运行时读取的“外部输入”被限定为用户提供的本地/已选定论文文本与其路径（如 `ljg-paper` 接收 arXiv link/PDF/paper title 后在工作流中据此读取原文并写入 Org 与 paper-map），该流程需对这些可读文本进行处理，但题中材料未展示任何会无选择地摄取公开社区/队列/邮件等第三方任意文本源的路径；因此无法确认存在“先不选具体条目就读到 outsider free text”的暴露。
- Repository
- lijigang/ljg-skills
- Commit
44f4105
- Audited
- Security analysis
Is this your skill?
If you maintain this skill, you can claim it as your own. Once claimed, you can manage eval scenarios, bundle related skills, attach documentation or rules, and ensure cross-agent compatibility.