广泛读取仓库后,可能把敏感商业或客户资料汇总到供其他 Skill 自动读取的文件
原文依据:5 处自动起草流程要求读取 README、页面、package.json 和“任何现有文档”,没有路径范围、敏感文件排除或脱敏规则。目标文档还会收录定价、竞争对手、客户名称、指标和证言,并声明其他营销 Skill 会自动使用它。
若仓库文档包含未公开定价、客户身份、内部指标或竞争策略,这些内容可能被复制进持久上下文,并在之后的营销任务中被继续使用。现有证据没有显示网络上传,但扩大了敏感信息在代理工作流中的可见范围。
风险成立,但仅在用户选择“从代码库自动起草”时发生,且流程要求先展示草稿供审核。Skill 明确要求读取代码库中的“任何现有文档”,再把客户、指标和证言等可能敏感的商业信息写入共享上下文,并告知其他营销 Skill 会自动使用它;可见指令没有说明排除私密目录或脱敏。用户可要求作者限定允许读取的文件、默认排除客户/密钥/内部资料,并在保存及供其他 Skill 使用前逐项确认敏感内容。
**If auto-drafting:**1. Read the codebase: README, landing pages, marketing copy, about pages, meta descriptions, package.json, any existing docs2. Draft all sections based on what you find3. Present the draft and ask what needs correcting or is missing4. Iterate until the user is satisfied查看另外 4 个位置
### 1. Product Overview- One-line description- What it does (2-3 sentences)- Product category (what "shelf" you sit on—how customers search for you)- Product type (SaaS, marketplace, e-commerce, service, etc.)- Business model and pricing### 11. Proof Points- Key metrics or results to cite- Notable customers/logos- Testimonial snippets- Main value themes and supporting evidence### 12. Goals- Primary business goal- Key conversion action (what you want people to do)- Current metrics (if known) - Use today's date in ISO form (YYYY-MM-DD) for the entry and `Last updated`. - **Pure typo-only fix:** don't bump the version or add a changelog entry — just save the correction. Every other change bumps the version and gets an entry. When the change is a real repositioning, say so plainly — downstream skills will now generate against the new context.- Save to `.agents/product-marketing.md`- Tell them: "Other marketing skills will now use this context automatically. The Changelog at the bottom tracks every revision — check it to see how your positioning has evolved. Run `/product-marketing` anytime to update it." - **Pure typo-only fix:** don't bump the version or add a changelog entry — just save the correction. Every other change bumps the version and gets an entry. When the change is a real repositioning, say so plainly — downstream skills will now generate against the new context.- Save to `.agents/product-marketing.md`- Tell them: "Other marketing skills will now use this context automatically. The Changelog at the bottom tracks every revision — check it to see how your positioning has evolved. Run `/product-marketing` anytime to update it."