{
  "$schema": "https://bestaiskill.com/schemas/agent-install/2.json",
  "skill": "canghe-danger-gemini-web",
  "built": "2026-10-26",
  "control_level": 5,
  "control_level_label": "L5 严管",
  "capabilities": [
    "reverse_api",
    "terms_compliance",
    "credential",
    "execute_command",
    "network",
    "write_file"
  ],
  "required_controls": {
    "agent": [
      "isolated_environment",
      "per_use_authorization"
    ],
    "admin": [
      "strict_authorization",
      "full_audit",
      "compliance_signoff"
    ]
  },
  "evidence": [
    {
      "file": "SKILL.md / 脚本",
      "summary": "Calls undisclosed or reverse-engineered private APIs / forges client identification"
    },
    {
      "file": "SKILL.md / 脚本参数",
      "summary": "Bypasses automated detection, disables host sandboxes, or skips SSL certificate verification"
    },
    {
      "file": "SKILL.md / 会话存储",
      "summary": "Reads or reuses browser user login states and session cookies"
    },
    {
      "file": "本地凭据 / 浏览器配置",
      "summary": "Reads user login cookies/sessions/keyrings: browser session cookies: __Secure-1PSID / __Secure-1PSIDTS, etc. (local cookies.json or via local Chrome)"
    },
    {
      "file": "scripts/",
      "summary": "Executes local scripts or commands: scripts/main.ts (run via npx -y bun; probes and spawns local browsers on demand to read cookies)"
    },
    {
      "file": "网络端点",
      "summary": "Declares external network access: https://gemini.google.com/app (INIT fetches page token)"
    },
    {
      "file": "本地工作目录",
      "summary": "File read/write and artifact output: cookies.json (credential persistence: writes session cookies)"
    }
  ],
  "verification": {
    "method": "第二遍独立重读 + 反查：① 全量清单核对：bundle §1 的 25 个文件逐个对上，确认无第二个入口、无混淆/压缩代码（均为可读 TS）；② 端点重扫：constants.ts 的 5 个端点 + client.ts 的 lh3.googleusercontent.com 逐个核对用途，无未记录的对外域名；③ 凭据面穷举：核对 cookie-file.ts / rotate-1psidts.ts / load-browser-cookies.ts / client.ts 四处写入与读取点，确认 __Secure-1PSID/1PSIDTS 为唯一凭据面；④ 反向质询“是否更严重”：检查 TLS 降级、反自动化伪装、任意代码执行、批量采集四类 token，均无命中；⑤ 功能声明核对：description 的 text/image/vision/multi-turn 四项在 SKILL.md 与脚本中均有对应实现，未见夸大。",
    "second_pass": [
      {
        "item": "逆向 API 而非官方 API（red 主因之一）",
        "status": "ok",
        "detail": "constants.ts 直指 gemini.google.com 的 StreamGenerate 私有路径；SKILL.md/description 自述 reverse-engineered，并设 consent 门禁。"
      },
      {
        "item": "读取浏览器会话 cookie（red 主因之二）",
        "status": "ok",
        "detail": "load-browser-cookies.ts 探测 127.0.0.1 调试端口并按需 spawn 浏览器；SKILL.md 自述 First run opens browser for Google auth。"
      },
      {
        "item": "凭据落盘",
        "status": "ok",
        "detail": "cookie-file.ts 的 writeFile(p, JSON.stringify(payload, null, 2)) 与 rotate-1psidts.ts 的 writeFile(cachePath, v) 两处写盘，路径由 paths.ts 解析。"
      },
      {
        "item": "无 TLS 降级 / 无 stealth 伪装 / 无任意代码执行",
        "status": "ok",
        "detail": "相关行为在 bundle 正文与 §3 风险扫描中均零命中；调度只有 init 重试与 sleep。"
      },
      {
        "item": "consent 门禁存在但为“软门禁”",
        "status": "ok",
        "detail": "SKILL.md 要求先建 consent.json 再使用；但脚本自身不校验该文件，属文档级约束，已写入 risks。"
      },
      {
        "item": "功能声明与实现相符",
        "status": "ok",
        "detail": "文本/图像/vision/多轮四项在 SKILL.md Options 与 main.ts/client.ts 均有对应实现，未见夸大。"
      }
    ],
    "level": 2,
    "level_label": "V2 已复核",
    "commit": "dd0bf355955b4c82b764740b4183c86a72ba0e0c",
    "sha256": "a98a97c1f7c8187928ca9edc6e6a06ff8c3a95d59615a78d2b5a8b83710789a9",
    "reviewed_by": "skills-bayx-audit",
    "reviewed_at": "2026-10-25"
  },
  "assessed_at": "2026-10-25",
  "method_version": "2.0",
  "mirror": {
    "archive": "https://skillpub.pages.dev/r2/v/2026-10-10/canghe-danger-gemini-web.tar.gz",
    "sha256": "a98a97c1f7c8187928ca9edc6e6a06ff8c3a95d59615a78d2b5a8b83710789a9",
    "commit": "dd0bf355955b4c82b764740b4183c86a72ba0e0c"
  },
  "original": {
    "github": "https://github.com/freestylefly/canghe-skills/tree/main/skills/canghe-danger-gemini-web",
    "path": "skills/canghe-danger-gemini-web",
    "commit": "dd0bf355955b4c82b764740b4183c86a72ba0e0c"
  }
}