lhb-analyzer
龙虎榜深度分析器。识别游资席位、判断机构 vs 游资博弈、对照同板块龙虎榜找辨识度龙头。当用户问"谁在买这只票/最近龙虎榜怎么样/X游资有没有上榜/这是不是X的票"时使用。
83%
Does it follow best practices?
Run evals on this skill
Adds up to 20 points to the overall score
Low
Low-risk findings worth noting
W011: Third-party content exposure detected (indirect prompt injection risk).
What this means
The skill exposes the agent to untrusted, user-generated content from public third-party sources, creating a risk of indirect prompt injection. This includes browsing arbitrary URLs, reading social media posts or forum comments, and analyzing content from unknown websites.
Why it was flagged
运行时先由 `scripts/fetch_lhb.py {ticker}` 获取龙虎榜“原始数据”，随后由 `lib/seat_db.py::match_seats_in_lhb()` 解析并用于游资识别，因此若该龙虎榜数据来源包含用户可提交的自由文本内容，就会形成外部自由文本在工作流中被 LLM 读取的间接注入暴露。
- Repository
wbh604/UZI-Skill
- Revision
cd2eefd
- Audited
- Security analysis
Is this your skill?
If you maintain this skill, you can claim it as your own. Once claimed, you can manage eval scenarios, bundle related skills, attach documentation or rules, and ensure cross-agent compatibility.