{
  "$schema": "https://bestaiskill.com/schemas/agent-install/2.json",
  "skill": "baoyu-image-gen",
  "built": "2026-10-26",
  "control_level": 5,
  "control_level_label": "L5 严管",
  "capabilities": [
    "reverse_api",
    "terms_compliance",
    "execute_command",
    "network",
    "write_file"
  ],
  "required_controls": {
    "agent": [
      "isolated_environment",
      "per_use_authorization"
    ],
    "admin": [
      "strict_authorization",
      "full_audit",
      "compliance_signoff"
    ]
  },
  "evidence": [
    {
      "file": "SKILL.md / 脚本",
      "summary": "Calling undocumented or reverse-engineered private APIs / spoofing client identity"
    },
    {
      "file": "SKILL.md / 脚本参数",
      "summary": "Involves bypassing automated checks, disabling host sandboxes, or skipping SSL certificate verification"
    },
    {
      "file": "scripts/",
      "summary": "Executes local scripts or commands: bun {baseDir}/scripts/main.ts (single image or --batchfile batch mode)"
    },
    {
      "file": "网络端点",
      "summary": "Declares external network access: api.openai.com / *.openai.azure.com (including custom AZURE_OPENAI_BASE_URL)"
    },
    {
      "file": "本地工作目录",
      "summary": "File read/write and artifact output: writes image files based on paths specified by --image/--batchfile; outputs multiple images and aggregates them by task in batch mode"
    }
  ],
  "verification": {
    "method": "第二遍独立重读 + 反查（换角度抓第一遍的错）：① 全目录清单（SKILL.md、references/ 12 份、scripts/main.ts+build-batch.ts+各 provider+codex-imagegen 7 文件，含测试）；② 逐 provider 反查端点与密钥读取点是否真实存在（grep process.env / https:// 逐条落地到文件行）；③ 反查『有无绕过/降级』：对全部脚本扫 no-sandbox / danger-full-access / disable-blink / AutomationControlled / rejectUnauthorized / --insecure，命中 codex-imagegen/spawn.ts 的 danger-full-access（及其在 main.ts 的注释自证），其余零命中；④ 反查『prompt 是否被消毒』：读 assertSafePath 与其调用点，确认只覆盖 --image/--ref 路径，PROMPT 段直插原文；⑤ 网络面反查：所有 fetch 端点均为各家官方域名，且可被 *_BASE_URL 覆盖；⑥ 元数据核对：HEAD=1567581c26ec、LICENSE=MIT、stars 25926、pushed_at 2026-09-10T15:13:43Z。",
    "second_pass": [
      {
        "item": "12 家 provider 的端点与默认模型",
        "status": "ok",
        "detail": "逐个文件核对：openai.ts(api.openai.com/v1, gpt-image-2.5-flare)、azure.ts、google.ts(gemini-3-pro-image)、openrouter.ts、dashscope.ts(qwen-image-2.0-pro)、zai.ts、minimax.ts、jimeng.ts(jimeng_t2i_v40)、seedream.ts(doubao-seedream-5-0-260128)、replicate.ts(google/nano-banana-2)、agnes.ts(agnes-image-2.5-flash)、codex-cli.ts；与 SKILL.md 描述一致。"
      },
      {
        "item": "密钥读取清单",
        "status": "ok",
        "detail": "SKILL.md 的 Environment Variables 表逐项在代码中命中对应 process.env 读取；另有 <PROVIDER>_BASE_URL 覆盖（jest 风格测试里也验证了 base URL 拼接）。"
      },
      {
        "item": "codex-cli 存在 --sandbox danger-full-access（安全降级）",
        "status": "ok",
        "detail": "skills/baoyu-image-gen/scripts/codex-imagegen/spawn.ts 内 args 含 '\"--sandbox\"' 与 '\"danger-full-access\"'；同目录 main.ts 注释与 assertSafePath 佐证该指令会被直接交给 codex。"
      },
      {
        "item": "prompt 被逐字插入无沙箱 agent 指令",
        "status": "ok",
        "detail": "codex-imagegen/main.ts 的 buildInstruction 返回模板内含 'PROMPT:' 后接 ${prompt}，逐字使用；main.ts:104-109 注释说明只对 output/ref 路径做元字符校验，未覆盖 prompt 内容。"
      },
      {
        "item": "codex-cli 不会被自动选中（红线触发条件）",
        "status": "ok",
        "detail": "SKILL.md Provider Selection 第 5 条与 main.ts 的 has* 判定均不含 codex-cli；需显式 --provider 或 EXTEND.md。"
      },
      {
        "item": "批量并行与重试参数",
        "status": "ok",
        "detail": "main.ts 常量 MAX_ATTEMPTS=3、DEFAULT_MAX_WORKERS=10、provider 级 concurrency/startIntervalMs 表（codex-cli 为 concurrency=1/2000ms），与 SKILL.md 文案一致。"
      },
      {
        "item": "『Codex OAuth 不等于 API key』的说明与代码一致",
        "status": "ok",
        "detail": "SKILL.md 明写不要把 Codex OAuth token 塞进 OPENAI_API_KEY；代码中 openai provider 只读 OPENAI_API_KEY，codex-cli 走独立 spawn 通道，未混用。"
      },
      {
        "item": "红线判级与上游口头结论的关系",
        "status": "discrepancy",
        "detail": "批4 口径曾一度把 image-gen 判为 orange（理由假设『无绕过/降级』）。本目录 evidence 与该假设不符：目录内确含 `--sandbox danger-full-access` 与 raw prompt 插值（上方两条 ok）。故按『证据优先』记 red，并在 reason 写明触发条件（仅 codex-cli 通道）；默认 provider 路径仍为橙级行为。"
      },
      {
        "item": "元数据（license/stars/commit）",
        "status": "ok",
        "detail": "git HEAD=1567581c26ec29f4216c6e6835415bf30343b0e3；仓库根 LICENSE=MIT（Copyright (c) 2026 Jim Liu）；GitHub API stars=25926、pushed_at=2026-09-10T15:13:43Z。"
      }
    ],
    "level": 2,
    "level_label": "V2 已复核",
    "commit": "1567581c26ec29f4216c6e6835415bf30343b0e3",
    "sha256": "4faafab87aede136c2934b7e17e7ed13d8f3ed5a95f8ee0677c00e8bc9aff259",
    "reviewed_by": "skills-bayx-audit",
    "reviewed_at": "2026-10-25"
  },
  "assessed_at": "2026-10-25",
  "method_version": "2.0",
  "mirror": {
    "archive": "https://skillpub.pages.dev/r2/v/2026-09-15/baoyu-image-gen.tar.gz",
    "sha256": "4faafab87aede136c2934b7e17e7ed13d8f3ed5a95f8ee0677c00e8bc9aff259",
    "commit": "1567581c26ec29f4216c6e6835415bf30343b0e3"
  },
  "original": {
    "github": "https://github.com/JimLiu/baoyu-skills/tree/main/skills/baoyu-image-gen",
    "path": "skills/baoyu-image-gen",
    "commit": "1567581c26ec29f4216c6e6835415bf30343b0e3"
  }
}