{
  "$schema": "https://bestaiskill.com/schemas/agent-install/2.json",
  "skill": "auto-commenter",
  "built": "2026-10-26",
  "control_level": 5,
  "control_level_label": "L5 严管",
  "capabilities": [
    "credential",
    "execute_command",
    "install_deps",
    "network",
    "write_file"
  ],
  "required_controls": {
    "agent": [
      "isolated_environment",
      "per_use_authorization"
    ],
    "admin": [
      "strict_authorization",
      "full_audit",
      "compliance_signoff"
    ]
  },
  "evidence": [
    {
      "file": "本地凭据 / 浏览器配置",
      "summary": "Reads user login cookies/sessions/keychains: Implicit: Playwright MCP operates with a persistent local browser profile, reusing the Reddit login state (browser cookies/session); SETUP.md"
    },
    {
      "file": "scripts/",
      "summary": "Executes local scripts or commands: The repository contains no scripts (entire repo consists of md/json/png); runtime requires the host to launch the MCP server: npx @playwright/mcp@latest (.mcp/settings.json)"
    },
    {
      "file": "scripts/ 或 SKILL.md",
      "summary": "Declares dynamic installation of external language package dependencies"
    },
    {
      "file": "网络端点",
      "summary": "Declares external network access: https://www.reddit.com/r/{subreddit}/new|rising/ (listing posts)"
    },
    {
      "file": "本地工作目录",
      "summary": "File read/write and artifact output: tracking/reddit/YYYY-MM-DD.md (creates daily file and appends: activity table + full comment text + permalink)"
    }
  ],
  "verification": {
    "method": "第二遍独立重读 + 反查（换角度抓第一遍的错）：① git ls-tree/ls 全量清单核对『零脚本』结论——仓库全部文件为 md/json/png/png/lock，无 .py/.js/.sh；② 对 .claude/ 全目录做 URL 正则全量提取，只有 reddit.com 两个模板 URL 与 product.md 的占位 https://yourproduct.com，无隐藏端点；③ 对全仓（排除 .git/node_modules）做 cookie|password|api_key|token|secret|login|credential 关键词扫描，命中仅 CONTRIBUTING.md('credential')、BATCH.md('login')、SKILL.md('token' 指 MCP token 优化 / 'login' 指 Login Required)，坐实『无凭证硬编码』；④ 逐条把第一遍的『能力』回读原文：16 项清单、8 种句式、长度配额、Step 1-8、BATCH 配额 24 均逐字存在，无夸大；⑤ 元数据核对：gh api 得 stars=585、pushed_at=2026-03-15T08:50:27Z、spdx=MIT，与本地 git HEAD e7fdda1（2026-03-15T17:50:27+09:00 同一时刻）一致；⑥ 反例搜索：README 自述 Responsible Use（不 spam/不伪造经历）与 skill 内 'AI detection prevention'、'Natural Promotion' 存在张力，已写入 risks 而非隐去。",
    "second_pass": [
      {
        "item": "仓库零脚本、能力来自 Playwright MCP",
        "status": "ok",
        "detail": "git ls-tree -r 全量仅 .claude/skills/reddit-commenter/{SKILL.md,BATCH.md,resources/*.md}、README/SETUP/QUICK_REFERENCE/CONTRIBUTING/CHANGES/LICENSE、.mcp/settings.json、package.json(-lock)、leads/reddit.md、tracking/reddit/template.md、assets/og_image.png、.github 模板；无任何可执行脚本。"
      },
      {
        "item": "MCP server 声明与 SKILL.md 工具名一致",
        "status": "ok",
        "detail": ".mcp/settings.json 注册 playwright/@playwright/mcp@latest；SKILL.md 使用 browser_navigate/browser_snapshot/browser_click/browser_type/browser_wait_for，并显式禁用 browser_take_screenshot，SETUP.md 另确认 'This installs the Playwright MCP server.'。"
      },
      {
        "item": "每社区每日 3 条 + 5-10 分钟间隔",
        "status": "ok",
        "detail": "SKILL.md Step 1 'Check subreddits under daily limit (3)'、'Check last comment time (minimum 5-10 minute intervals)'；BATCH.md 配额公式 24=8×3 与 '[4] ... (wait 5-15 minutes)' 存在（两文件对等待区间的措辞略有差异：5-10 vs 5-15）。"
      },
      {
        "item": "16 项个性化清单与 8 种句式模板",
        "status": "ok",
        "detail": "personalization_reddit.md 内 '## Personalization Checklist (16 Items)' 表逐项 1-16（含 #14 AI detection prevention、#16 Site verification），'## 8 Style Patterns' 1-8 节均存在；SKILL.md Step 5 要求逐项检查。"
      },
      {
        "item": "反 AI 检测 / 反重复结构",
        "status": "ok",
        "detail": "原文 '## Avoid Repetitive Structure (CRITICAL)'、'Repeating this structure makes it look AI-generated'、'## AI-Like Comment Prevention (CRITICAL)' 与长度分布配额均逐字存在。"
      },
      {
        "item": "『先看帖再写』与『真访问站点』两条真实性约束",
        "status": "ok",
        "detail": "Step 3 全段（含 'Absolutely NO speculative feedback on things you didn't see'）与 Cautions 第 6 条一致，无夸大。"
      },
      {
        "item": "无凭证/密钥硬编码",
        "status": "ok",
        "detail": "全仓关键词扫描仅 3 处无关命中（MCP token 优化、Login Required、CONTRIBUTING 的 credential 讨论）；无 .env、无 API key 常量。"
      },
      {
        "item": "登录态来源（凭证面）最终定性",
        "status": "discrepancy",
        "detail": "第一遍曾想写『无凭证读取』，第二遍修正：skill 文件确实不读密钥，但 SETUP.md 要求账号已在本机浏览器登录、BATCH.md 专门处理 'Login session expired'，说明运行时依赖浏览器登录态（cookie 级）。故按『凭证据实接触』定档 orange，并在 credential_reads 以『隐式复用浏览器登录态』如实记录，而非直报『无』。"
      },
      {
        "item": "外发对象可预期性",
        "status": "discrepancy",
        "detail": "第一遍按『只发 reddit.com』记录；第二遍发现 Step 3 要求浏览器访问 OP 给的任意链接（含产品站/落地页），外发对象实际由不可信帖内容决定，已改写 network_calls 第 3 条。"
      },
      {
        "item": "license/stars/commit 元数据",
        "status": "ok",
        "detail": "gh api repos/rokpiy/auto-commenter：MIT、585★、pushed_at=2026-03-15T08:50:27Z、archived=false；本地 HEAD=e7fdda137e20d80e8f0193c9a559d1d89ca877a6，与任务书 pin commit 一致。"
      },
      {
        "item": "skill 内名与页面名不一致",
        "status": "ok",
        "detail": "SKILL.md frontmatter name=reddit-commenter，而站点条目名为 Auto Commenter（slug auto-commenter，来自仓库名）。已按内部名写入 skill.name，并在 path 记实际目录 .claude/skills/reddit-commenter。"
      }
    ],
    "level": 2,
    "level_label": "V2 已复核",
    "commit": "e7fdda137e20d80e8f0193c9a559d1d89ca877a6",
    "sha256": "31277b2a576dd188741ffdcdfc30a1df3b9ef8e9f876f6497205166ab7545770",
    "reviewed_by": "skills-bayx-audit",
    "reviewed_at": "2026-10-25"
  },
  "assessed_at": "2026-10-25",
  "method_version": "2.0",
  "mirror": {
    "archive": "https://skillpub.pages.dev/r2/v/2026-09-15/auto-commenter.tar.gz",
    "sha256": "31277b2a576dd188741ffdcdfc30a1df3b9ef8e9f876f6497205166ab7545770",
    "commit": "e7fdda137e20d80e8f0193c9a559d1d89ca877a6"
  },
  "original": {
    "github": "https://github.com/rokpiy/auto-commenter/tree/main/.claude/skills/reddit-commenter",
    "path": ".claude/skills/reddit-commenter",
    "commit": "e7fdda137e20d80e8f0193c9a559d1d89ca877a6"
  }
}