CtrlK
BlogDocsLog inGet started
Tessl Logo

article-writing

编写文章、指南、博客、教程、时事通讯(Newsletter)等长内容,支持从示例或品牌指南中提取独特的语感语调。适用于需要撰写超过一个段落的精炼文本,尤其是对语气一致性、结构和可信度有较高要求时。

68

Quality

83%

Does it follow best practices?

Run evals on this skill

Adds up to 20 points to the overall score

View guide

SecuritybySnyk

Low

Low-risk findings worth noting

SKILL.md
Quality
Evals
Security
Low

W011: Third-party content exposure detected (indirect prompt injection risk).

What this means

The skill exposes the agent to untrusted, user-generated content from public third-party sources, creating a risk of indirect prompt injection. This includes browsing arbitrary URLs, reading social media posts or forum comments, and analyzing content from unknown websites.

Why it was flagged

该技能的“语感提取工作流”要求用户提供/收集的语调素材(已发表文章、时事通讯、X/LinkedIn 帖子、文档/备忘录、风格指南)属于外部作者文本,且在运行时会被用于语调与格式的提取,因此存在把用户或第三方免费文本直接喂给 LLM 的间接提示注入风险。

Report incorrect finding
Repository
xu-xiang/everything-claude-code-zh
Audited
Security analysis
Snyk

Is this your skill?

If you maintain this skill, you can claim it as your own. Once claimed, you can manage eval scenarios, bundle related skills, attach documentation or rules, and ensure cross-agent compatibility.