deep-research
深度调研方法论（8步法）：将模糊主题转化为高质量调研报告。 触发词：/deep-research、深度调研、帮我调研、调研一下、对比分析 注意：如果用户需要的是可视化图谱而非报告，请使用 research-to-diagram skill。
68
83%
Does it follow best practices?
Run evals on this skill
Adds up to 20 points to the overall score
View guide
Low
Low-risk findings worth noting
Low
Low-risk findings.
1 low severity finding. Worth noting, but not necessarily harmful.
W011: Third-party content exposure detected (indirect prompt injection risk).
What this means
The skill exposes the agent to untrusted, user-generated content from public third-party sources, creating a risk of indirect prompt injection. This includes browsing arbitrary URLs, reading social media posts or forum comments, and analyzing content from unknown websites.
Why it was flagged
SKILL.md 指定会通过网络/下载/社区（如 GitHub Issues/Reddit/HN）获取“资料”，并要求把这些外部网页/帖子正文抽取为事实卡片写入中间文件，随后再把这些文件（尤其 Step 6.5 的 02_事实卡片.md 与 04_推导过程.md）交给 LLM/独立 Agent 处理，从而存在把外部人士撰写的自由文本引入模型上下文的路径。
- Repository
- nexu-io/nexu
- Commit
dadfb1c
- Audited
- Security analysis
Is this your skill?
If you maintain this skill, you can claim it as your own. Once claimed, you can manage eval scenarios, bundle related skills, attach documentation or rules, and ensure cross-agent compatibility.