clarify-before-change
在修改前澄清范围、风险、假设与验收标准，避免误改。用于修改 Skill、AGENTS.md、项目规则、工作流规则、仓库结构、复杂代码或具有结构影响的文档，也用于优化 Skill、调整规则、重构、重组或需求不完整的场景。
63
75%
Does it follow best practices?
Run evals on this skill
Adds up to 20 points to the overall score
View guide
Low
Low-risk findings worth noting
Fix and improve this skill with Tessl
tessl review fix ./skills/clarify-before-change/SKILL.mdW011: Third-party content exposure detected (indirect prompt injection risk).
What this means
The skill exposes the agent to untrusted, user-generated content from public third-party sources, creating a risk of indirect prompt injection. This includes browsing arbitrary URLs, reading social media posts or forum comments, and analyzing content from unknown websites.
Why it was flagged
The workflow inspects the repository and local files, and optionally queries web search or docs without monitoring an outsider-authored message feed.
- Repository
- ooooooooooooooooooop/agent-tools
- Commit
915f189
- Audited
- Security analysis
Is this your skill?
If you maintain this skill, you can claim it as your own. Once claimed, you can manage eval scenarios, bundle related skills, attach documentation or rules, and ensure cross-agent compatibility.