BD worldcup-2026-assistant
2026 美加墨世界杯专属助手。提供赛程查询、球队实力分析、比赛预测、体彩选购指南四大功能。 所有输出适配飞书消息格式，静态数据本地缓存，动态数据实时查询。 触发词：世界杯, 世界杯赛程, 世界杯预测, 世界杯分析, 世界杯赔率, 世界杯体彩, 世界杯助手, 2026世界杯, 美加墨世界杯, 赛程查询, 比赛预测, 体彩指南, 球队排名, 球队实力, 足彩, 竞彩, 赔率, 体彩选购, 单关, 串关, 今天赛程, 今日比赛, 查赛程, 今天有什么比赛, 今天的体彩, 比赛结果, 昨天比分, 世界杯比分, 世界杯结果, 比分结果, 谁会赢, 谁赢, 能赢吗, 赢面多大, 实力对比, 分析一下, 买哪场, 买什么, 推荐买, 怎么买体彩, 买球, 买单关, 买串关, 今晚有球吗, 有比赛吗, 几点比赛, 几点开球, 今晚世界杯, 看球, 看比赛, 球队分析, 阵容分析, 球员状态, 比分预测, 让球, 大小球, 盘口 不适用于: 非世界杯足球赛事, 赌球推荐, 直播文字直播, 非足球运动
2026 美加墨世界杯专属助手。提供赛程查询、球队实力分析、比赛预测、体彩选购指南四大功能。 所有输出适配飞书消息格式，静态数据本地缓存，动态数据实时查询。 触发词：世界杯, 世界杯赛程, 世界杯预测, 世界杯分析, 世界杯赔率, 世界杯体彩, 世界杯助手, 2026世界杯, 美加墨世界杯, 赛程查询, 比赛预测…
As a process D 44/100 · Unfinished process — weak spots: result and completion, when it triggers, inputs and preconditions
How to improve
- Say in the description WHEN to use the skill ("use when…", example requests): that is the agent's main cue.
- Your own cases (evals/evals.json, 4–6 real requests with expected answers): the full check would then run those instead of a model-drafted suite.
- A spec.yaml with trigger phrases and assertions — a behaviour contract for CI; `skilltest init` writes a template.
Guard findings · 1
✓ No critical or high findings
Medium and low: 1
-
low Exfiltration
net-credential-useSKILL.md:632Credential used in a network call (verify the destination is the intended service) (security demo / example)> ⚠️ **禁止通过 Python heredoc + `os.environ` 传递 token**：JWT 含特殊字符，通过 shell 环境变量传给 Python 时会损坏导致 410000。正确做法：① 直接用 shell curl；② 或先 `echo "$TOKEN" > /tmp/token.txt` 再让 Python 从文件读取
demo
Files scanned: 4. Evidence is masked. Grey chips explain why severity was lowered.
Against the Agent Skills spec
- warning
description-no-whendescription does not say WHEN to use the skill (no "use when") - note
frontmatter-keyunknown frontmatter key "homepage"
Process rating: all ten parameters 44/100
- 0Result and completion. Does not say what the result is
- 0Inputs and preconditions. Does not say what the process needs to start
- 0Failures and branches. Linear process with no failure handling
- 0Progress reporting. Says nothing while it works
- 20When it triggers. No condition that starts the skill
- 60Tools and files. Uses tools (bash, web, python) that frontmatter does not declare
- 70Execution cost. Instruction body is 4348 tokens
- 100Steps. 250 steps
- 100Consistency. Name and required fields are in place
- 100Running it twice. No mutating operations
- low 15 top-level sections: this looks like several domains in one skill
Everything here is measured from the skill text rather than judged by a model, so the numbers are checkable. A parameter weighs more when it is a more common reason for the process to stall.
Quality signals
- +5Description has no quoted example phrases that should trigger the skill
- +4Description does not say when NOT to use the skill (false activations)
- +3Output format is not stated: the model decides each time
- -2localhost URLs: will not work for another user
- -254 emoji in the instructions: noise for the model
- +1No license
- +2Single-language instructions
- +3Description length 448: enough signal without eating the budget
- +4Structure: 49 headings
- +3Step-by-step instructions: 250 items
- +4Has examples (15 code blocks)
Quality base 70; lint remarks subtract, signals add up to 100. Result: 67.