跳转到正文
报告库
用途分类 / 其他用途

Marketing Council Skill 安全审计

作者说它能做什么(原文)

When the user wants multiple expert perspectives on a marketing question — a simulated board of advisors staffed by legendary marketers (Seth Godin, David Ogilvy, Eugene Schwartz, April Dunford, Rory Sutherland, Alex Hormozi, Byron Sharp, and more). Also use when the user mentions 'marketing council,' 'board of advisors,' 'advisory board,' 'what would Seth Godin say,' 'what would Ogilvy think,' 'c

第三方安全检查结论

发现安全风险

已检查文件
15
发现的风险
5
会不会运行危险命令?检查是否下载程序后直接运行、让他人远程控制电脑,或藏起要运行的命令。未发现风险
会不会泄露文件和密钥?检查是否发送含密码或密钥的文件,以及代码里是否直接写了密钥。发现 1 项风险
中风险

实时研究可能把保密的营销主题发送给搜索或研究服务

原文依据:2 处
发现了什么

研究流程要求按 `[顾问姓名] + [主题]` 搜索,并可能调用其他研究、视频或近期信息技能。如果“主题”包含未公开的产品、客户、定价、重组或发布计划,这些内容会进入外部查询。Skill 没有要求在搜索前脱敏或再次征得同意。

为什么需要注意

搜索提供商、所调用技能及其日志可能获知公司的保密方向或即将进行的商业决策。

实时研究是条件性的,但当主题具体或用户要来源时,Skill 指示通过外部研究技能或网页搜索查询“顾问名 + 主题”。若主题含未公开的产品、客户、定价或发布信息,这些词可能被发送给外部服务;可见说明没有脱敏步骤。用户可要求先展示拟查询词、删除专有名词,并只在明确同意后联网。

SKILL.md:86来自说明文档打开原文件
When the topic is specific (a niche, a channel shift, a current platform change) or the user wants sources, go beyond the dossiers:- **If a deep-research skill is installed** (e.g., `deep-research`): use it to find what the seated advisors have actually said or written about this topic class — books, essays, interviews, podcasts — plus current state of the debate.- **If a video-analysis skill is installed** (e.g., `watch-video`): pull takes from specific talks/interviews the research surfaces.- **If a recency skill is installed** (e.g., `last30days`): check for recent takes when the topic is fast-moving.- **Otherwise**: use built-in web search for `[advisor name] + [topic]` per seated advisor, preferring primary sources (their own books, blogs, newsletters, talks) over roundup articles.
查看另外 1 个位置
SKILL.md:88来自说明文档打开原文件
- **If a deep-research skill is installed** (e.g., `deep-research`): use it to find what the seated advisors have actually said or written about this topic class — books, essays, interviews, podcasts — plus current state of the debate.- **If a video-analysis skill is installed** (e.g., `watch-video`): pull takes from specific talks/interviews the research surfaces.- **If a recency skill is installed** (e.g., `last30days`): check for recent takes when the topic is fast-moving.- **Otherwise**: use built-in web search for `[advisor name] + [topic]` per seated advisor, preferring primary sources (their own books, blogs, newsletters, talks) over roundup articles.
会不会删除文件或一直在后台运行?检查是否大范围删除文件、改写磁盘,或设置自动启动。发现 1 项风险
低风险

添加私人顾问会在项目中持久保存其观点与风格档案

原文依据:5 处
发现了什么

“添加自定义顾问”流程会把文件写入 `.agents/advisors/<name>.md`,内容包括私人同事或管理者的观点、盲点和语言风格。说明强调该文件会长期保留,但没有要求检查版本控制、项目共享范围或当事人同意。

为什么需要注意

档案可能被提交到共享仓库、备份或被其他项目参与者读取,从而暴露对真实个人的内部描述,带来隐私和声誉问题。

添加自定义顾问会把档案写入项目的 `.agents/advisors/`,并明确以经受 Skill 更新的方式持久保存。模板要求记录观点、盲点和语言风格;私人顾问内容由用户提供,能防止虚构,却没有处理该文件是否进入版本控制、被团队共享或是否取得当事人同意。用户可要求保存前确认路径、共享范围和敏感字段,或仅在会话中使用。

SKILL.md:142来自说明文档打开原文件
Users can extend the bench ("add my own advisor"). Create a dossier following the structure in [references/advisor-template.md](references/advisor-template.md) — the same fields as the built-in advisors (lens, frameworks, documented positions with sources, signature questions, best-for/blind spots, voice notes, key works). For non-famous advisors (the user's old boss, an internal exec), have the user supply the positions; do not invent them. Save to `.agents/advisors/<name>.md` in the user's project so it persists and never collides with repo updates.
查看另外 4 个位置
references/advisor-template.md:3来自说明文档打开原文件
Copy this structure to add an advisor to the bench. Save custom advisors to `.agents/advisors/<kebab-name>.md` in your project (not inside the skill folder) so they survive skill updates.Two kinds of custom advisors, two grounding standards:- **Public figures** (a famous marketer not on the bench): every framework and position must trace to something they published or said — research before writing, cite sources, follow the same grounding rules as the built-in dossiers.- **Private advisors** (your former boss, your best customer, your CFO): the *user* supplies the positions and heuristics. The agent must not invent views for a real private person — interview the user to fill the template.
references/advisor-template.md:33来自说明文档打开原文件
## Best for / blind spots**Best for:** [problem types their lens genuinely illuminates]**Blind spots:** [documented criticisms or acknowledged limits — this iswhat makes their dissent honest rather than decorative]## Voice notes[2-3 sentences: sentence rhythm, favorite metaphors, tone, tics. Enoughto write in their register without fabricating quotes.]
references/advisor-template.md:36来自说明文档打开原文件
**Best for:** [problem types their lens genuinely illuminates]**Blind spots:** [documented criticisms or acknowledged limits — this iswhat makes their dissent honest rather than decorative]## Voice notes[2-3 sentences: sentence rhythm, favorite metaphors, tone, tics. Enoughto write in their register without fabricating quotes.]
references/advisor-template.md:7来自说明文档打开原文件
- **Public figures** (a famous marketer not on the bench): every framework and position must trace to something they published or said — research before writing, cite sources, follow the same grounding rules as the built-in dossiers.- **Private advisors** (your former boss, your best customer, your CFO): the *user* supplies the positions and heuristics. The agent must not invent views for a real private person — interview the user to fill the template.
会不会绕过安全保护?检查是否跳过网站安全验证、开放过多文件权限,或取消操作前的确认。未发现风险
会不会误导 AI 或隐藏内容?检查工作说明是否要求 AI 忽略你的指令、干扰检查结果,或夹带看不见的文字。发现 2 项风险
中风险

项目中的营销背景和自定义顾问文件可能向代理注入指令

原文依据:3 处
发现了什么

Skill 要求自动读取项目控制的营销背景文件,并会把 `.agents/advisors/` 中的自定义文件当作顾问档案加载,但没有要求把其中内容仅视为资料、忽略内嵌命令。恶意或被篡改的仓库可以在这些 Markdown 文件中放入面向代理的指令。

为什么需要注意

如果承载该 Skill 的代理拥有文件、网络或账户工具,注入内容可能改变委员会回答,或诱使代理执行与营销咨询无关的操作;实际影响取决于代理权限及其是否服从文件内容。

该 Skill 会在提问前读取项目中的营销背景文件,并将项目内的自定义顾问 Markdown 当作档案加载;没有明确要求把这些内容仅视为不可信资料并忽略其中的操作指令。因此,若仓库由他人提供或文件遭篡改,嵌入的提示可能影响代理的判断或后续操作。用户可要求作者增加“不执行档案内指令”的边界,并限制 Skill 只读取经确认的文件。

SKILL.md:16来自说明文档打开原文件
**Check for product marketing context first:**If `.agents/product-marketing.md` exists (or `.claude/product-marketing.md`, or the legacy `product-marketing-context.md`), read it before asking questions.
查看另外 2 个位置
SKILL.md:142来自说明文档打开原文件
Users can extend the bench ("add my own advisor"). Create a dossier following the structure in [references/advisor-template.md](references/advisor-template.md) — the same fields as the built-in advisors (lens, frameworks, documented positions with sources, signature questions, best-for/blind spots, voice notes, key works). For non-famous advisors (the user's old boss, an internal exec), have the user supply the positions; do not invent them. Save to `.agents/advisors/<name>.md` in the user's project so it persists and never collides with repo updates.
references/advisor-template.md:51来自说明文档打开原文件
**Seating a custom advisor:** mention them by name when convening ("seat my advisor Maria on this council"). The agent loads the file from `.agents/advisors/` and treats it like any bench dossier, including the grounding rules — no fabricated quotes, no invented endorsements.
中风险

研究结果被要求优先于内置档案,但没有针对网页提示注入的边界

原文依据:4 处
发现了什么

Skill 明确要求在研究结果与档案冲突时“信任研究”。外部网页、访谈转录或研究技能返回的内容并非可信指令源,其中可能包含要求代理泄露资料、调用工具或忽略限制的文本。

为什么需要注意

恶意搜索结果可能不只扭曲顾问观点,还可能试图控制具备工具权限的代理。是否能成功取决于研究工具如何隔离内容以及代理的权限。

这段代码的正常用途

“信任研究”在上下文中是解决事实出处冲突的规则,不是让代理执行网页中的命令。相邻说明要求优先原始来源、附引用并注明更正,且禁止无法核实的引语和虚构背书。来源没有显示网页文字会被当作工具指令执行;候选所述提示注入执行链缺乏证据。

这项判断针对展示的代码和适用条件,不表示风险已经实际发生。
SKILL.md:88来自说明文档打开原文件
- **If a deep-research skill is installed** (e.g., `deep-research`): use it to find what the seated advisors have actually said or written about this topic class — books, essays, interviews, podcasts — plus current state of the debate.- **If a video-analysis skill is installed** (e.g., `watch-video`): pull takes from specific talks/interviews the research surfaces.- **If a recency skill is installed** (e.g., `last30days`): check for recent takes when the topic is fast-moving.- **Otherwise**: use built-in web search for `[advisor name] + [topic]` per seated advisor, preferring primary sources (their own books, blogs, newsletters, talks) over roundup articles.Fold findings into the takes with citations ("In a 2023 interview on X, Dunford argued…"). If research contradicts a dossier, trust the research and note the correction.
查看另外 3 个位置
SKILL.md:91来自说明文档打开原文件
- **If a recency skill is installed** (e.g., `last30days`): check for recent takes when the topic is fast-moving.- **Otherwise**: use built-in web search for `[advisor name] + [topic]` per seated advisor, preferring primary sources (their own books, blogs, newsletters, talks) over roundup articles.
SKILL.md:93来自说明文档打开原文件
Fold findings into the takes with citations ("In a 2023 interview on X, Dunford argued…"). If research contradicts a dossier, trust the research and note the correction.
SKILL.md:98来自说明文档打开原文件
- **Label the session as simulation** once, at the top: a line like *"Simulated council — each take is built from the advisor's published frameworks and positions, not their actual review."*- **No fabricated quotes.** Direct quotation only for lines verifiable in the dossier or research pass, with the source named. Otherwise paraphrase: "Hopkins's position in *Scientific Advertising* is…"- **No invented endorsements or condemnations.** An advisor can be simulated *applying their framework* to the user's product; never state or imply the real person has an opinion about the user's specific company.- **Living advisors get extra care.** Godin, Brunson, Hormozi, Dunford, Sutherland, Sharp, Handley, and Vaynerchuk are alive and active — their positions evolve; prefer the research pass for anything time-sensitive, and never simulate them commenting on named competitors or controversies.
会不会偷偷改推广链接或收款方?检查是否强制替换推广链接或收款对象,同时要求隐瞒更改。发现 1 项风险
中风险

高确信度的模拟建议可能被误当作已验证的商业决策依据

原文依据:7 处
发现了什么

每位模拟顾问被要求用强烈确信表达建议,最终还要给出适合用户情况的统一建议;但实时核验只是可选步骤。内置档案包含概括、二手来源和明确标注为自报或未核实的内容,因此模拟意见不等于这些人物真实审阅,也不等于针对该业务的实证结论。

为什么需要注意

用户可能据此改变价格、品牌、渠道或投放预算,而没有验证客户数据、法规、单位经济性或真实实验结果,造成收入或品牌损失。

该 Skill 要求模拟顾问以强烈确信给出建议,并最终形成适配用户业务的综合建议,而实时研究只是可选。虽然它明确标注模拟、禁止冒充真实背书,并要求呈现分歧,这些措施降低了误解风险,但用户仍可能把有把握的表达当作已验证结论。用户可要求把关键假设、证据缺口和待测试事项与建议并列,并避免仅凭模拟结果作高风险商业决定。

SKILL.md:75来自说明文档打开原文件
1. **Load the seated advisors' dossiers** from `references/advisors/`.2. **Optional live research pass** — see below. Offer it when the question is specific enough that documented positions may not cover it, or the user wants citations.3. **Each advisor's take** — 2–4 paragraphs per advisor:   - Open with the advisor applying their *signature questions* to the user's case   - Apply their frameworks to the specifics (their dossier lists them) — not generic advice with a name attached   - State their recommendation with the conviction they'd actually have   - Written in their voice per the dossier's voice notes, without fabricated quotes4. **The disagreement map** — the most valuable section. Identify 2-4 genuine conflicts between the takes, name the underlying trade-off each conflict represents (e.g., "Sharp vs. Godin here is really reach vs. resonance — which constraint binds *this* business?"), and say what evidence would settle each.5. **Synthesis** — a chair's summary: the recommendation that best fits *this* user's stage, category, and constraints; which advisor's warning to keep as a tripwire; and concrete next steps with skill handoffs (see Related Skills).
查看另外 6 个位置
SKILL.md:97来自说明文档打开原文件
- **Label the session as simulation** once, at the top: a line like *"Simulated council — each take is built from the advisor's published frameworks and positions, not their actual review."*- **No fabricated quotes.** Direct quotation only for lines verifiable in the dossier or research pass, with the source named. Otherwise paraphrase: "Hopkins's position in *Scientific Advertising* is…"- **No invented endorsements or condemnations.** An advisor can be simulated *applying their framework* to the user's product; never state or imply the real person has an opinion about the user's specific company.- **Living advisors get extra care.** Godin, Brunson, Hormozi, Dunford, Sutherland, Sharp, Handley, and Vaynerchuk are alive and active — their positions evolve; prefer the research pass for anything time-sensitive, and never simulate them commenting on named competitors or controversies.- **Disagree in substance, not caricature.** Each advisor's take must be the strongest version of their view applied to this case — no strawmen for the synthesis to knock down.
references/advisors/alex-hormozi.md:35来自说明文档打开原文件
**Best for:** Offer construction, pricing, unit-economics discipline, lead gen for high-LTV services/info/SaaS, breaking analysis paralysis with volume quotas.**Blind spots (documented):** Critics document engineered scarcity/FOMO in his own launches (e.g., the 2025 Money Models launch critique) and note the playbook oversimplifies outside high-ticket, pain-driven categories. Offer-maximalism (bonus stacks, urgency, guarantees) reads infomercial-coded in brand-sensitive, enterprise, and luxury contexts. Little on long-horizon brand, creative craft, or buyers not in acute pain. *His launch/revenue figures are self-reported — don't state as verified fact.*
references/advisors/gary-halbert.md:35来自说明文档打开原文件
**Best for:** Offer-market fit before copy polish, audience/list selection, direct-response email and mail, injecting urgency and personality into sterile copy, ruthless founder prioritization.**Blind spots:** No framework for brand, product, retention, or reputation. His career included an 18-month federal prison term for mail fraud (the Boron Letters were written from that camp) — the documented shadow side of the style; his tactics transfer poorly to trust-sensitive, regulated, or enterprise contexts. *Legend-figures like the coat-of-arms letter's "most mailed in history" claims are unverifiable — treat as lore, not statistics.*
SKILL.md:12来自说明文档打开原文件
**This is persona simulation, not the real people.** Every take must be grounded in what the advisor actually wrote or said (see Grounding Rules). Label the output as simulation.
SKILL.md:79来自说明文档打开原文件
   - Apply their frameworks to the specifics (their dossier lists them) — not generic advice with a name attached   - State their recommendation with the conviction they'd actually have   - Written in their voice per the dossier's voice notes, without fabricated quotes4. **The disagreement map** — the most valuable section. Identify 2-4 genuine conflicts between the takes, name the underlying trade-off each conflict represents (e.g., "Sharp vs. Godin here is really reach vs. resonance — which constraint binds *this* business?"), and say what evidence would settle each.
SKILL.md:81来自说明文档打开原文件
   - Written in their voice per the dossier's voice notes, without fabricated quotes4. **The disagreement map** — the most valuable section. Identify 2-4 genuine conflicts between the takes, name the underlying trade-off each conflict represents (e.g., "Sharp vs. Godin here is really reach vs. resonance — which constraint binds *this* business?"), and say what evidence would settle each.5. **Synthesis** — a chair's summary: the recommendation that best fits *this* user's stage, category, and constraints; which advisor's warning to keep as a tripwire; and concrete next steps with skill handoffs (see Related Skills).

Skill 逻辑拆解

8 个说明模块

该 Skill 根据营销人物的档案模拟顾问委员会;默认选择 3–5 人,并要求至少一名持反对意见的顾问。输出必须明确说明这不是真人评价。

查看原文
SKILL.md:10来自说明文档打开原文件
You convene a **simulated board of marketing advisors**: legendary marketers whose documented frameworks, published positions, and known heuristics you apply to the user's specific problem. The value isn't any single take — it's the *disagreement*. The bench is built from thinkers whose lenses conflict in useful ways, so the user sees the real trade-offs before choosing a direction.**This is persona simulation, not the real people.** Every take must be grounded in what the advisor actually wrote or said (see Grounding Rules). Label the output as simulation.
SKILL.md:53来自说明文档打开原文件
For a council session, seat 3–5 advisors:1. **2–3 whose lens directly fits the question type** (table below).2. **Always seat at least one designated dissenter** — an advisor whose documented position conflicts with where the question is leaning. A council that agrees is a mirror, not a board.3. Honor explicit requests ("I want Hormozi and Godin on this").

开始会话前,它会查找并读取项目中的产品营销背景文件,然后只加载入选顾问的档案。

查看原文
SKILL.md:16来自说明文档打开原文件
**Check for product marketing context first:**If `.agents/product-marketing.md` exists (or `.claude/product-marketing.md`, or the legacy `product-marketing-context.md`), read it before asking questions.
SKILL.md:74来自说明文档打开原文件
1. **Load the seated advisors' dossiers** from `references/advisors/`.2. **Optional live research pass** — see below. Offer it when the question is specific enough that documented positions may not cover it, or the user wants citations.

对于具体、近期或要求引用的问题,它可以调用已安装的研究技能,或通过内置网页搜索查询每位顾问与相关主题,并把结果及引用并入回答。

查看原文
SKILL.md:86来自说明文档打开原文件
When the topic is specific (a niche, a channel shift, a current platform change) or the user wants sources, go beyond the dossiers:- **If a deep-research skill is installed** (e.g., `deep-research`): use it to find what the seated advisors have actually said or written about this topic class — books, essays, interviews, podcasts — plus current state of the debate.- **If a video-analysis skill is installed** (e.g., `watch-video`): pull takes from specific talks/interviews the research surfaces.- **If a recency skill is installed** (e.g., `last30days`): check for recent takes when the topic is fast-moving.- **Otherwise**: use built-in web search for `[advisor name] + [topic]` per seated advisor, preferring primary sources (their own books, blogs, newsletters, talks) over roundup articles.Fold findings into the takes with citations ("In a 2023 interview on X, Dunford argued…"). If research contradicts a dossier, trust the research and note the correction.

用户要求添加自定义顾问时,该 Skill 会在项目的 `.agents/advisors/` 下创建持久档案;对于私人顾问,观点应由用户提供,而不能由代理编造。

查看原文
SKILL.md:142来自说明文档打开原文件
Users can extend the bench ("add my own advisor"). Create a dossier following the structure in [references/advisor-template.md](references/advisor-template.md) — the same fields as the built-in advisors (lens, frameworks, documented positions with sources, signature questions, best-for/blind spots, voice notes, key works). For non-famous advisors (the user's old boss, an internal exec), have the user supply the positions; do not invent them. Save to `.agents/advisors/<name>.md` in the user's project so it persists and never collides with repo updates.
从这里开始 · 工作说明SKILL.md
marketing-council
连线表示工作说明包含的模块,不是实际运行顺序。点击模块可查看原文。 另有 3 个章节,可在原文件中查看。

文件引用关系图

14 处引用
哪些文件发起引用引用了什么
连线表示真实的文件引用,不是运行顺序。点击节点可高亮相关连线,并查看具体文件和原文位置。虚线表示还有文件需要定位。
文件与检查记录15 个文件

检查范围与遗漏

逐文件查看涉及的内容

下方列出本次涉及的原文范围;纳入检查不代表已查清所有问题。

  • SKILL.md已纳入全文
  • references/advisor-template.md已纳入全文
  • references/advisors/alex-hormozi.md已纳入全文
  • references/advisors/ann-handley.md已纳入全文
  • references/advisors/april-dunford.md已纳入全文
  • references/advisors/byron-sharp.md已纳入全文
  • references/advisors/claude-hopkins.md已纳入全文
  • references/advisors/david-ogilvy.md已纳入全文
  • references/advisors/eugene-schwartz.md已纳入全文
  • references/advisors/gary-halbert.md已纳入全文
  • references/advisors/gary-vaynerchuk.md已纳入全文
  • references/advisors/rory-sutherland.md已纳入全文
  • references/advisors/russell-brunson.md已纳入全文
  • references/advisors/seth-godin.md已纳入全文
  • evals/evals.json已纳入全文

这份报告只针对上方版本。我们看了拿到的代码和说明文件,没有实际运行 Skill,也没有检查它另外安装的软件包。因此,这不是“保证安全”的承诺;换了版本或使用环境,结果也可能不同。

  • SKILL.md工作说明
  • evals/evals.json配套文件
  • references/advisor-template.md配套文件
  • references/advisors/alex-hormozi.md配套文件
  • references/advisors/ann-handley.md配套文件
  • references/advisors/april-dunford.md配套文件
  • references/advisors/byron-sharp.md配套文件
  • references/advisors/claude-hopkins.md配套文件
  • references/advisors/david-ogilvy.md配套文件
  • references/advisors/eugene-schwartz.md配套文件
  • references/advisors/gary-halbert.md配套文件
  • references/advisors/gary-vaynerchuk.md配套文件
  • references/advisors/rory-sutherland.md配套文件
  • references/advisors/russell-brunson.md配套文件
  • references/advisors/seth-godin.md配套文件
读取了多少行
807
文件校验值(用于核对版本)
fce58352beb0d2f12f7421825939a27af625ef14d3b7d9da1f0f17b406e20023