{
  "$schema": "https://bestaiskill.com/schemas/agent-install/2.json",
  "skill": "brainstorming",
  "built": "2026-10-26",
  "control_level": 4,
  "control_level_label": "L4 高权限",
  "capabilities": [
    "execute_command",
    "network",
    "write_file"
  ],
  "required_controls": {
    "agent": [
      "sandbox_recommended",
      "graded_authorization"
    ],
    "admin": [
      "approval_process",
      "rollback_support",
      "full_audit"
    ]
  },
  "evidence": [
    {
      "file": "scripts/",
      "summary": "Execute local scripts or commands: scripts/start-server.sh (bash; starts local Node server, writes PID/port/token files, can kill previous instances)"
    },
    {
      "file": "网络端点",
      "summary": "Declared external network access: user browser loads https://primeradiant.com/brand/superpowers-visual-brainstorming-log"
    },
    {
      "file": "本地工作目录",
      "summary": "File read/write and artifact output: agent (per skill instructions) writes screen_dir/*.html screen content; writes docs/superpowers/specs/YYYY-MM-"
    }
  ],
  "verification": {
    "method": "第一遍：全目录通读（SKILL.md 250 行、visual-companion.md、spec-document-reviewer-prompt.md、server.cjs 724 行 raw 全读、helper.js、两个 shell 脚本、frame-template.html grep）；第二遍独立换角度复查：网络模式全量 grep（http/ws/child_process/require）、隐藏文件检查、每项外发与安全结论回源码定位、功能声明与实际代码相符度比对。",
    "second_pass": [
      {
        "item": "外发端点仅 primeradiant.com + github.com",
        "status": "ok",
        "detail": "全目录 grep https?://|ws://|fetch 复查：仅 server.cjs:106（logo URL）与 251（github 链接）；helper.js/frame-template.html 零外链；server.cjs 无任何 http.request/fetch（只有 createServer）"
      },
      {
        "item": "零第三方依赖声明",
        "status": "ok",
        "detail": "server.cjs require 清单仅 crypto/http/fs/path/os/child_process 六个内置模块；scripts/ 下无 package.json，无 npm 安装步骤"
      },
      {
        "item": "点击事件回写 state/events",
        "status": "ok",
        "detail": "handleMessage 中 fs.appendFileSync(eventsFile, JSON.stringify(event) + '\\n') 与 visual-companion.md 描述一致；新屏出现时事件文件被清空（startServer 中 knownFiles 分支 unlinkSync）"
      },
      {
        "item": "token 门控与跨站防护",
        "status": "ok",
        "detail": "isAuthorized 用 timingSafeEqualStr 比对 ?key= 或 cookie；isAllowedWebSocketOrigin 强制 origin===http://host；安全头齐全（X-Frame-Options DENY/CORP same-origin/no-referrer）；/files/ 经 path.basename + lstat 非符号链接 + nlink===1 + realpath 前缀三重校验"
      },
      {
        "item": "spec-document-reviewer-prompt.md 在 SKILL.md 中被引用（第一遍初始印象）",
        "status": "discrepancy",
        "detail": "出入：本 pin 的 SKILL.md 未引用该文件——Spec Self-Review 已内联化为 4 步清单（\"Fix any issues inline. No need to re-review\"）。文件存在但处于未接线状态；RELEASE-NOTES.md:547 描述的是早前文档审查系统（docs/superpowers/plans/2026-01-22-document-review-system.md），该设计已不被当前 SKILL.md 采用。internal_assets 已按『存在但未接线』修正"
      },
      {
        "item": "telemetry 语义",
        "status": "ok",
        "detail": "代码中 SUPERPOWERS_TELEMETRY_DISABLED 只控制 brandMarkup 是否渲染 primeradiant.com logo <img> 与文案前缀，无任何事件上报代码路径；三枚禁用环境变量实读存在（server.cjs:107-110）"
      },
      {
        "item": "功能声明 vs 实际能力相符度",
        "status": "ok",
        "detail": "description『Explores user intent, requirements and design before implementation』与实现相符，但注意：MUST 级前置声明（\"You MUST use this before any creative work\"）与 HARD-GATE 均为纯 prompt 约束，无宿主级强制机制——是否生效取决于宿主加载与模型遵从，属能力边界而非缺陷"
      }
    ],
    "level": 1,
    "level_label": "V1 已固定",
    "commit": "b36e0829c6d0140e93cfef2ca599b1b07d4a7797",
    "sha256": "217df8a1906bc3fc9e5b688bd9b166de3b521a8df54514b54edbbea3e152171a",
    "reviewed_by": null,
    "reviewed_at": null
  },
  "assessed_at": "2026-10-25",
  "method_version": "2.0",
  "mirror": {
    "archive": "https://skillpub.pages.dev/r2/v/2026-09-06/brainstorming.tar.gz",
    "sha256": "217df8a1906bc3fc9e5b688bd9b166de3b521a8df54514b54edbbea3e152171a",
    "commit": "b36e0829c6d0140e93cfef2ca599b1b07d4a7797"
  },
  "original": {
    "github": "https://github.com/obra/superpowers/tree/main/skills/brainstorming",
    "path": "skills/brainstorming",
    "commit": "b36e0829c6d0140e93cfef2ca599b1b07d4a7797"
  }
}