story-short-scan
短篇网文扫榜。分析知乎盐言、七猫、黑岩、点众等平台热门短篇数据，捕捉风口题材。触发方式：/story-short-scan、/短篇扫榜、「短篇什么火」「知乎故事排行」。
64
78%
Does it follow best practices?
Run evals on this skill
Adds up to 20 points to the overall score
View guide
Low
Low-risk findings worth noting
Fix and improve this skill with Tessl
tessl review fix ./skills/story-short-scan/SKILL.mdLow
Low-risk findings.
1 low severity finding. Worth noting, but not necessarily harmful.
W011: Third-party content exposure detected (indirect prompt injection risk).
What this means
The skill exposes the agent to untrusted, user-generated content from public third-party sources, creating a risk of indirect prompt injection. This includes browsing arbitrary URLs, reading social media posts or forum comments, and analyzing content from unknown websites.
Why it was flagged
该技能的必经运行路径会在“browser-cdp 采集模式”下直接抓取外部平台页面内容（如点众 `ishugui.com/browse`、`/book/{id}` 详情文本；黑岩通过已登录的浏览器从 `manage.zhangwenpindu.cn/books/booklist`/相关 API 拉取简介/标签等），这些平台由第三方作者产生的自由文本会被 LLM 在分析扫榜时读入。
- Repository
- worldwonderer/oh-story-claudecode
- Commit
5de060f
- Audited
- Security analysis
Is this your skill?
If you maintain this skill, you can claim it as your own. Once claimed, you can manage eval scenarios, bundle related skills, attach documentation or rules, and ensure cross-agent compatibility.