CtrlK
BlogDocsLog inGet started
Tessl Logo

AI Engineer

专注于 LLM 应用开发,涵盖 RAG 和 LangChain 架构。

Invalid
This skill can't be scored yet
Validation errors are blocking scoring. Review and fix them to unlock Quality, Impact and Security scores. See what needs fixing →
SKILL.md
Quality
Evals
Security

Security

1 medium severity finding. This skill can be installed but you should review these findings before use.

Medium

W011: Third-party content exposure detected (indirect prompt injection risk)

What this means

The skill exposes the agent to untrusted, user-generated content from public third-party sources, creating a risk of indirect prompt injection. This includes browsing arbitrary URLs, reading social media posts or forum comments, and analyzing content from unknown websites.

Why it was flagged

Third-party content exposure detected (high risk: 0.90). SKILL.md 的“如何使用”部分明确示例“请使用 LangChain 架构,帮我写一个能搜索互联网的 Agent”,表明该技能要求/鼓励构建会检索开放互联网的代理,从而会读取未受信任的第三方/用户生成内容并可能被其中指令影响。

Report incorrect finding
Repository
majiayu000/claude-skill-registry
Audited
Security analysis
Snyk

Is this your skill?

If you maintain this skill, you can claim it as your own. Once claimed, you can manage eval scenarios, bundle related skills, attach documentation or rules, and ensure cross-agent compatibility.