跳转到正文
报告库
用途分类 / 其他用途

Interview Me Skill 安全审计

作者说它能做什么(原文)

Extracts what the user actually wants instead of what they think they should want. Achieves this through one-question-at-a-time interview until ~95% confidence about the underlying intent. Use when an ask is underspecified ("build me X" without "for whom" or "why now"), when the user explicitly invokes ("interview me", "grill me", "are we sure?", "stress-test my thinking"), or when you catch yours

第三方安全检查结论

发现安全风险

已检查文件
1
发现的风险
2
会不会运行危险命令?检查是否下载程序后直接运行、让他人远程控制电脑,或藏起要运行的命令。未发现风险
会不会泄露文件和密钥?检查是否发送含密码或密钥的文件,以及代码里是否直接写了密钥。未发现风险
会不会删除文件或一直在后台运行?检查是否大范围删除文件、改写磁盘,或设置自动启动。未发现风险
会不会绕过安全保护?检查是否跳过网站安全验证、开放过多文件权限,或取消操作前的确认。未发现风险
会不会误导 AI 或隐藏内容?检查工作说明是否要求 AI 忽略你的指令、干扰检查结果,或夹带看不见的文字。发现 2 项风险
中风险

强制确认规则可能无视用户结束访谈或授权继续的表达

原文依据:3 处
发现了什么

该流程不接受“Sounds good”“Sure, let's go”或用户明确说开始作为有效确认,并要求反复重述,直到获得指定形式的“明确 yes”。这会让 Skill 用自己的主观确认标准取代用户对谈话节奏和授权方式的选择。

为什么需要注意

当用户已经愿意继续时,代理仍可能阻止规划或实施、反复追问,增加时间成本,并使用户为了结束循环而被迫采用 Skill 要求的措辞。

该规则是实际流程要求,不是示例:即使用户说“Sounds good”“Sure, let's go”或“okay let's start”,代理仍被要求继续追问,直到得到该 Skill 认可的明确确认。若用户只是想结束访谈并授权继续,这可能延误工作,并以代理对措辞的判断取代用户表达的节奏。不过流程也设有“数轮后停止”的上限,因此证据支持的是交互阻滞和自主性风险,而非无限循环。用户可要求作者允许清晰的继续指令作为确认,或设置最大提问轮数。

SKILL.md:115来自说明文档打开原文件
The gate is an explicit "yes." The following are **not** yes:- "Whatever you think is best." → The user is delegating, which means they don't have 95% confidence either. Re-ask with two concrete options framed as a choice.- "Sounds good." → Ambiguous. Ask: "Anything you'd refine?" Silence isn't confirmation.- "Sure, let's go." → Often a polite exit, not an endorsement. Same follow-up.- Silence followed by "okay let's start." → The user has given up on the interview, not converged. Stop and ask whether you've missed something.
查看另外 2 个位置
SKILL.md:122来自说明文档打开原文件
If they correct you, fold the correction in and restate. Loop until you get an explicit yes.
SKILL.md:132来自说明文档打开原文件
This is a checkable test, not a vibe. It also has a floor: if you've gone several rounds and still can't predict, that's information about the ask, not a reason to keep grinding. Stop and tell the user: "I've asked X questions and I still can't predict your reactions. Something foundational is missing. Want to step back?"
中风险

刻意使用引导性猜测可能锚定用户的选择

原文依据:4 处
发现了什么

该 Skill 要求每个问题附带代理的猜测,并建议偶尔故意猜一个预计用户会反驳的方向;文档还直接称“Leading is the point”。虽然它承认顺从风险,但这种设计仍会先向用户植入代理选择的框架。

为什么需要注意

顺从、赶时间或把代理视为权威的用户可能接受被提示的答案,最终得到反映代理预设而非自身需求的“确认意图”,从而影响后续产品或商业决策。

这是活跃的访谈设计:每个问题都必须先附上代理的答案猜测,且文档明确把“引导”视为目的,还建议偶尔选择预期用户会反驳的方向。这样可能把用户锚定在代理提供的框架或选项中,尤其对倾向顺从的用户。文档确实识别并尝试缓解顺从风险,但不能消除猜测本身对决定的影响。用户可要求先提出中性问题、让猜测可选,或在展示猜测前先记录自己的答案。

SKILL.md:71来自说明文档打开原文件
**Why attach a guess:**- The user reacts faster to a wrong guess than they generate an answer from scratch- It commits you to a hypothesis you can be visibly wrong about, which keeps you honest- It surfaces *your* assumptions, which is what the interview is meant to exposeThe risk here is a polite user agreeing with your guess to be agreeable. Mitigate by being visibly willing to be wrong, and occasionally guess in a direction you expect the user to push back on.
查看另外 3 个位置
SKILL.md:197来自说明文档打开原文件
| "I should give them several options to pick from" | Options work when the user knows what they want and is choosing between trade-offs. They don't know what they want yet. Listing options widens the search; asking narrows it. || "If I attach my guess, I'm leading them" | Leading is the point. Reacting is faster than generating from scratch. The risk is sycophancy, not leading; mitigate by being visibly willing to be wrong. || "We've talked enough, I get it" | Test it: can you predict their reaction to the next three questions? If not, you don't get it yet. |
SKILL.md:53来自说明文档打开原文件
### Step 2: Ask one question at a time, each with a guess attachedFormat:```Q: <one focused question>GUESS: <your hypothesis for the answer, with the reasoning that produced it>```
SKILL.md:73来自说明文档打开原文件
- The user reacts faster to a wrong guess than they generate an answer from scratch- It commits you to a hypothesis you can be visibly wrong about, which keeps you honest- It surfaces *your* assumptions, which is what the interview is meant to exposeThe risk here is a polite user agreeing with your guess to be agreeable. Mitigate by being visibly willing to be wrong, and occasionally guess in a direction you expect the user to push back on.
会不会偷偷改推广链接或收款方?检查是否强制替换推广链接或收款对象,同时要求隐瞒更改。未发现风险

Skill 逻辑拆解

8 个说明模块

该 Skill 的主要行为是先提出对用户意图的假设和置信度,然后每次只问一个问题,并等待用户回答后继续。

查看原文
SKILL.md:42来自说明文档打开原文件
Before asking anything, write down your current best read of what the user wants in **one sentence**, plus an honest confidence number (0–100%):
SKILL.md:62来自说明文档打开原文件
Wait for the user to react before asking the next question.

它只适用于实时互动,明确要求不要在 CI、定时任务或自主循环中调用;需求不清时应报告阻塞。

查看原文
SKILL.md:36来自说明文档打开原文件
This skill needs a live, responsive user. **Do not invoke in non-interactive contexts** like CI pipelines, scheduled runs, `/loop`, or autonomous-loop. If you're in one of those and the ask is underspecified, flag that as a blocker for the user instead of guessing.

其交付物仅是经过确认的意图陈述,而不是规格、计划或代码。只有用户确认后,才建议把该陈述保存到 docs/intent/[topic].md。

查看原文
SKILL.md:136来自说明文档打开原文件
The output of this skill is a **confirmed statement of intent**: the restate from Step 4, with an explicit yes from Step 5. That's the deliverable. Specs, plans, and task lists are downstream; they consume the intent this skill produces.
SKILL.md:138来自说明文档打开原文件
If the user wants the intent to persist (a multi-session project, a handoff to another collaborator), offer to save it to `docs/intent/[topic].md`. Only save if they confirm.
从这里开始 · 工作说明SKILL.md
interview-me
连线表示工作说明包含的模块,不是实际运行顺序。点击模块可查看原文。 另有 2 个章节,可在原文件中查看。
文件与检查记录1 个文件

检查范围与遗漏

逐文件查看涉及的内容

下方列出本次涉及的原文范围;纳入检查不代表已查清所有问题。

  • SKILL.md已纳入全文

这份报告只针对上方版本。我们看了拿到的代码和说明文件,没有实际运行 Skill,也没有检查它另外安装的软件包。因此,这不是“保证安全”的承诺;换了版本或使用环境,结果也可能不同。

  • SKILL.md工作说明
读取了多少行
226
文件校验值(用于核对版本)
3e0bdf9191031d473a584a423f63a1f35515b6f85d58895ff10f05d8e5222f2e