用途分类 / 内容写作
Writing Shape Skill 安全审计
作者说它能做什么（原文）
Writing, exploit: shape raw material into an article, paragraph by paragraph.
第三方安全检查结论
这次检查未发现明显风险
- 已检查文件
- 2
- 发现的风险
- 0
会不会运行危险命令？检查是否下载程序后直接运行、让他人远程控制电脑，或藏起要运行的命令。未发现风险
会不会泄露文件和密钥？检查是否发送含密码或密钥的文件，以及代码里是否直接写了密钥。未发现风险
会不会删除文件或一直在后台运行？检查是否大范围删除文件、改写磁盘，或设置自动启动。未发现风险
会不会绕过安全保护？检查是否跳过网站安全验证、开放过多文件权限，或取消操作前的确认。未发现风险
会不会误导 AI 或隐藏内容？检查工作说明是否要求 AI 忽略你的指令、干扰检查结果，或夹带看不见的文字。未发现风险
会不会偷偷改推广链接或收款方？检查是否强制替换推广链接或收款对象，同时要求隐瞒更改。未发现风险
Skill 逻辑拆解
该 Skill 将用户提供的 Markdown 作为素材库，要求先完整阅读，再把内容重组为单独的文章；它明确规定不得编辑原始素材文件。
查看原文
The user has passed (or will pass) a markdown file of raw material. Treat it as the input pile: anything from a tidy list of fragments to a wall of unstructured prose to a transcript. The format does not matter. Read it end-to-end before doing anything else.Then run a shaping session that produces a separate article document. This is **exploit**: the exploring is done, the pile is fixed: commit to a structure and mine the pile to fill it. Do not edit the raw material file: it is read-only to this skill.写作过程由用户参与控制：Skill 先确认读者前置知识，提供 2–3 个开头让用户选择，然后逐段讨论并写入；是否完成由用户决定。
查看原文
1. **Read the pile.** Read the input file in full. Form a sense of what's in it.2. **Establish the prerequisites.** Settle with the user what the reader knows walking in: the concepts that are **grounded** from the start. Everything else must be grounded by a block before a later block can lean on it. See [Grounding](#grounding).3. **Draft 2–3 candidate openings.** Each opening should imply a different thesis or angle for the article. Show all of them. Force the user to pick or compose a hybrid. The chosen opening defines what the rest of the article must do.4. **Grow paragraph by paragraph.** After the opening lands, ask "given this opening, what does the reader need to hear next?" Pull material from the pile to answer. The next block may only lean on grounded concepts, and grounds new ones as it lands. Argue about the form the next block takes: a paragraph, a list, a table, a callout, a quote, a code block. Each format choice should be deliberate and defensible.5. **Append to the article file as you go.** Don't batch. Write each agreed paragraph or block immediately so the user can see the article taking shape.6. **Loop step 4 until the article is done.** The user decides when it's done.该 Skill 会持续修改文章文件，但要求在路径未指定时先询问，并在每次写入前重新读取文件，以保留用户在两轮之间所做的更改；重写仅限指定段落。
查看原文
If the user did not say where to save the article, ask once and remember the path.Append to the article file as each block is agreed. Re-read the file from disk before every write: the user may have edited between turns. Never overwrite blindly. If the user wants a paragraph rewritten, edit that specific paragraph in place; leave the rest alone.配置禁止隐式调用，因此该 Skill 应由明确选择触发，而不是仅凭对话内容自动启动。
查看原文
description: "Writing, exploit: shape raw material into an article, paragraph by paragraph."disable-model-invocation: true--- short_description: "Shape raw material into an article"policy: allow_implicit_invocation: false从这里开始 · 工作说明SKILL.md
writing-shape文件与检查记录2 个文件
检查范围与遗漏
逐文件查看涉及的内容
下方列出本次涉及的原文范围；纳入检查不代表已查清所有问题。
SKILL.md已纳入全文agents/openai.yaml已纳入全文
这份报告只针对上方版本。我们看了拿到的代码和说明文件，没有实际运行 Skill，也没有检查它另外安装的软件包。因此，这不是“保证安全”的承诺；换了版本或使用环境，结果也可能不同。
SKILL.md工作说明agents/openai.yaml配套文件
代码和说明中提到的操作
读取文件
1. **Read the pile.** Read the input file in full. Form a sense of what's in it.2. **Establish the prerequisites.** Settle with the user what the reader knows walking in: the concepts that are **grounded** from the start. Everything else must be grounded by a block before a later block can lean on it. See [Grounding](# …Append to the article file as each block is agreed. Re-read the file from disk before every write: the user may have edited between turns. Never overwrite blindly. If the user wants a paragraph rewritten, edit that specific paragraph in place; leave the rest alone.- 读取了多少行
- 86
- 文件校验值（用于核对版本）
- 4e197ea8d55aef72ab865997422c77c8bf88bd5a90a2ebae36daed1f0487fd75