deep-research
多源深度调研管道（Web Deep Research + Coder 合成 + 云端模型咨询）。 Use when: 技术问题需要多源调查、设计决策需要证据、operator说"调研"/"research"、需要咨询云端模型。 Not for: 简单搜索（直接用 WebSearch）、已有结论的确认。 Output: 调研报告 + 证据合成 或 咨询文档（含回填区）。
62
73%
Does it follow best practices?
Run evals on this skill
Adds up to 20 points to the overall score
View guide
Low
Low-risk findings worth noting
Fix and improve this skill with Tessl
tessl review fix ./cat-cafe-skills/deep-research/SKILL.mdW011: Third-party content exposure detected (indirect prompt injection risk).
What this means
The skill exposes the agent to untrusted, user-generated content from public third-party sources, creating a risk of indirect prompt injection. This includes browsing arbitrary URLs, reading social media posts or forum comments, and analyzing content from unknown websites.
Why it was flagged
在 Step 2（三路并行 Web 调研）和“Chrome MCP 自动化”里，通过浏览器自动化工具把注入的 prompt/文件内容发送到 ChatGPT/Claude/Gemini 的 Deep Research 流程，进而让模型读取并生成对外部网页/来源的调研结果（外部来源内容可能被模型消化）。
- Repository
- zts212653/clowder-ai
- Commit
61389cc
- Audited
- Security analysis
Is this your skill?
If you maintain this skill, you can claim it as your own. Once claimed, you can manage eval scenarios, bundle related skills, attach documentation or rules, and ensure cross-agent compatibility.