Skill audit report
hv-analysis Audit report.
横纵分析法（Horizontal-Vertical Analysis）深度研究Skill。由数字生命卡兹克提出，融合了索绪尔的历时-共时分析、社会科学的纵向-横截面研究设计、商学院案例研究法与竞争战略分析的核心思想。 当用户想要系统性研究一个产品、公司、概念、技术或人物时使用。核心是双轴分析：纵轴追踪从诞生到当下的完整生命历程（以叙事故事呈现），横轴在当下时间截面上与竞品/同类进行系统性横向对比，最后交叉两条轴产出独到洞察。最终产出一份排版精美的PDF研究报告。 触发词包括但不限于：横纵分析、研究一下、帮我分析、深度研究、做个研究、调研一下、竞品分析、帮我看看这个东西怎么样、这个产品/公司/概念是怎么回事、帮我摸清楚、帮我搞懂、帮我做个deep research。 即使用户只是说"帮我了解一下XX"或"XX是什么来头"，只要上下文暗示需要系统性的深度研究（而非简单的概念解释），都应该触发。也适用于用户丢来一个产品名、公司名、技术名词说"帮我研究一下这个"的场景。 不要用于简单的名词解释（用户只是问"XX是什么"）、不要用于公众号写作（那个用khazix-writer）、不要用于纯标题摘要生成（用wechat-title）。
OpenAgentSkill Trust Score
OpenAgentSkill Trust Score
The Trust Score helps an agent decide whether a skill is safe enough to shortlist before installation.
GitHub adoption
PASS100
20K GitHub stars
Stars/forks activity
PASS97
20K stars, 2.2K forks; issue activity unavailable in current metadata
Recent maintenance
PASS88
3mo since push
License clarity
PASS86
MIT
README/SKILL.md completeness
PASS86
Metadata includes enough usage and workflow context
Dependency/runtime risk
WARN54
command execution surface, external package install surface
Install availability
PASS92
npx skills add KKKKhazix/khazix-skills --skill hv-analysis
Install command safety
PASS92
standard package or runtime install path
Permission surface
WARN48
shell or command execution, filesystem or document access
Repository evidence
PASS86
https://github.com/KKKKhazix/khazix-skills/tree/main/hv-analysis
Review status
INFO66
AI review data available
Agent Proven outcomes
INFO54
No agent outcome data yet
Checks
Install and adoption review
Install path
92
npx skills add KKKKhazix/khazix-skills --skill hv-analysis
Repository
88
https://github.com/KKKKhazix/khazix-skills/tree/main/hv-analysis
License
86
MIT
Maintenance
88
3mo since push
AI review
55
The skill instructs to install Python dependencies with --break-system-packages, which may override system packages and pose a minor system stability risk, but it's a common practice in containerized environments and not inherently destructive.
README/SKILL.md completeness
86
Usable description available
Dependency risk
54
command execution surface, external package install surface
Install command safety
92
standard package or runtime install path
Permission surface
48
shell or command execution, filesystem or document access
Stars/forks activity
97
20K stars, 2.2K forks; issue activity unavailable in current metadata
Adoption
88
20K GitHub stars
Warnings
- Dependency or permission surface needs review
- Permission surface may require sandboxing
- The skill instructs to install Python dependencies with --break-system-packages, which may override system packages and pose a minor system stability risk, but it's a common practice in containerized environments and not inherently destructive.
- The skill relies heavily on sub-agent web search capabilities, which could potentially be misused if the agent environment lacks proper sandboxing, but no explicit dangerous commands or exfiltration paths are present.
- The SKILL.md does not explicitly mention the MIT license, but the repository license is MIT, so compliance is acceptable.
- Quality score needs review
- Permission surface needs review: shell or command execution, filesystem or document access
- Dependency/runtime risk: command execution surface, external package install surface
- Permission surface: shell or command execution, filesystem or document access
Method
This report combines public metadata, AI review output, repository freshness, install readiness, OpenAgentSkill events, quality scoring, trust checks, and the agent safety gate. It is not a full source-code security review.
Compare nearby options
Related skills to audit next
Last30days Skill
Research the last 30 days across Reddit, X, YouTube, Hacker News, Polymarket, GitHub, and the web, then synthesize a grounded brief for an AI agent.
64K Stars · Audit report
Academic Research Skills
Academic Research Skills for Claude Code: research → write → review → revise → finalize
38K Stars · Audit report
mono-color
Generate original one-ink or controlled two-ink editorial images from any theme, sentence, article idea, object, or reference photo. Always use this skill when the user asks for 单色海报、双色印刷、单色调视觉、蓝色/绿色孔版印刷、risograph、网点照片、复古或当代编辑排版、zine poster, monochrome editorial poster, duotone print, or asks to use the mono-color style. It uses an adaptive white, gray, or pale-beige substrate, no more than two printing inks, active negative space, terse human language, and strong serif/grotesk/mono typography without making retro styling the default or copying a source composition, wording, logo, or artwork. Produce both the final generation prompt and the generated raster image unless the user explicitly asks for prompt only.
1.9K Stars · Audit report