{
  "$schema": "https://bestaiskill.com/schemas/agent-install/2.json",
  "skill": "canghe-format-markdown",
  "built": "2026-10-26",
  "control_level": 4,
  "control_level_label": "L4 高权限",
  "capabilities": [
    "execute_command",
    "network",
    "write_file"
  ],
  "required_controls": {
    "agent": [
      "sandbox_recommended",
      "graded_authorization"
    ],
    "admin": [
      "approval_process",
      "rollback_support",
      "full_audit"
    ]
  },
  "evidence": [
    {
      "file": "scripts/",
      "summary": "Execute local scripts or commands: scripts/main.ts (run via npx -y bun: read file → typesetting processing → write back in place)"
    },
    {
      "file": "网络端点",
      "summary": "Declared external network access: registry.npmjs.org (npx fetches autocorrect-node and bun dependencies on first run; npx package version is not locked in this repository)"
    },
    {
      "file": "本地工作目录",
      "summary": "File I/O and artifact output: {filename}-formatted.md (formal output artifact)"
    }
  ],
  "verification": {
    "method": "第二遍独立重读 + 反查：① 清单核对：bundle §1 的 7 个文件逐个对上（SKILL.md + 3 个 TS + package.json/package-lock.json/bun.lock），确认无第二个入口、无混淆；② 端点重扫：§3 URL 命中 91 条全部落在 package-lock.json 的赞助/registry 链接与文档示例，无业务外发域名，确认仅 npx 拉包；③ 写盘面穷举：核对 main.ts 的 readFileSync/writeFileSync 与 SKILL.md 的备份 mv，确认原地修改与备份两处副作用；④ 反查“是否更严重”：§3「危險旗標/防護繞過」与「沙箱/未受控執行」均无命中，未见 TLS 降级、stealth、eval/远程代码；⑤ 逐条核对 autocorrect.ts 的 execSync 形态，确认与同类 baoyu 版（args 数组）不同，属字符串插值。",
    "second_pass": [
      {
        "item": "无业务网络请求，仅 npx 拉包",
        "status": "ok",
        "detail": "§3 URL 命中集中在 package-lock.json 的 registry/赞助链接；脚本无业务端点调用，唯一外发是 npx 拉 autocorrect-node。"
      },
      {
        "item": "本地读写与原地修改",
        "status": "ok",
        "detail": "main.ts 以 readFileSync/writeFileSync 同路径读写；SKILL.md 的「Typography fixes only」路径直接改原文件，无副本。"
      },
      {
        "item": "CJK 排版三能力",
        "status": "ok",
        "detail": "emphasis（remark-cjk-friendly）、spacing（autocorrect-node）、quotes（quotes.ts 全角替换）三项在脚本职责与 SKILL.md 选项中均有对应。"
      },
      {
        "item": "execSync 命令注入面",
        "status": "ok",
        "detail": "autocorrect.ts 用模板串把 filePath 插进 shell 命令；同类 baoyu 版用 spawnSync(npxCmd, [...args]) 的数组形式，本版更弱，已记入 injection_surface 与 risks。"
      },
      {
        "item": "无凭证读取",
        "status": "ok",
        "detail": "目录内无 env/keychain/cookie 读取；仅检查 EXTEND.md 偏好文件是否存在（非凭证）。"
      },
      {
        "item": "与 baoyu 同型实现的差异",
        "status": "ok",
        "detail": "canghe 版无 references/ 与分析底稿，目录更精简（7 文件）；排版脚本形态由 spawnSync 改为 execSync。"
      },
      {
        "item": "依赖可复现性",
        "status": "ok",
        "detail": "remark 生态在 package.json/package-lock.json/bun.lock 有锁定；但 npx autocorrect-node 未锁定具体版本。"
      }
    ],
    "level": 1,
    "level_label": "V1 已固定",
    "commit": "dd0bf355955b4c82b764740b4183c86a72ba0e0c",
    "sha256": "535df884a21e0d2e926426ff76c05c8075e6137a57966a8b36568089b1552437",
    "reviewed_by": null,
    "reviewed_at": null
  },
  "assessed_at": "2026-10-25",
  "method_version": "2.0",
  "mirror": {
    "archive": "https://skillpub.pages.dev/r2/v/2026-10-10/canghe-format-markdown.tar.gz",
    "sha256": "535df884a21e0d2e926426ff76c05c8075e6137a57966a8b36568089b1552437",
    "commit": "dd0bf355955b4c82b764740b4183c86a72ba0e0c"
  },
  "original": {
    "github": "https://github.com/freestylefly/canghe-skills/tree/main/skills/canghe-format-markdown",
    "path": "skills/canghe-format-markdown",
    "commit": "dd0bf355955b4c82b764740b4183c86a72ba0e0c"
  }
}