{
  "$schema": "https://bestaiskill.com/schemas/agent-install/2.json",
  "skill": "canghe-markdown-to-html",
  "built": "2026-10-26",
  "control_level": 4,
  "control_level_label": "L4 高权限",
  "capabilities": [
    "execute_command",
    "network",
    "write_file"
  ],
  "required_controls": {
    "agent": [
      "sandbox_recommended",
      "graded_authorization"
    ],
    "admin": [
      "approval_process",
      "rollback_support",
      "full_audit"
    ]
  },
  "evidence": [
    {
      "file": "scripts/",
      "summary": "Execute local script or command: npx -y bun ${SKILL_DIR}/scripts/main.ts <markdown_file> --theme <theme> (age"
    },
    {
      "file": "网络端点",
      "summary": "Declare external network access: PlantUML rendering: sends GET to https://www.plantuml.com/plantuml to fetch SVG (diagram source code transmitted externally), only when document contains p"
    },
    {
      "file": "本地工作目录",
      "summary": "File read/write & artifact output: Writes <name>.html in the same directory as input (backed up as .bak-YYYYMMDDHHMMSS before overwriting)"
    }
  ],
  "verification": {
    "method": "第二遍独立于第一遍：抛开首轮结论，重新通读 bundle 的 §2 内文（SKILL.md / package.json / 主题 CSS）、§1 文件清单与 §3 风险扫描命中行，逐条核对实现原理、能力、外部依赖与安全结论；bundle 未展开的 main.ts / render.ts 正文不臆测，标注为无法定位。",
    "second_pass": [
      {
        "item": "实现原理（SKILL.md 编排 + main.ts 执行）",
        "status": "ok",
        "detail": "SKILL.md 的 Script Directory/Workflow 段落自证 agent 只做路由，转换由 scripts/main.ts 承担；执行命令逐字可核。"
      },
      {
        "item": "PlantUML 执行期外发",
        "status": "ok",
        "detail": "plantuml.ts 的 @default 端点与风险扫描 plantuml.ts:193 的 fetch(svgUrl) 相互印证，判橙据成立。"
      },
      {
        "item": "三套主题存在性",
        "status": "ok",
        "detail": "§1 清单与 §2 内文均含 themes/default.css、grace.css、simple.css，主题描述与 SKILL.md 一致。"
      },
      {
        "item": "依赖栈",
        "status": "ok",
        "detail": "package.json 列出 marked/highlight.js/juice/front-matter/remark-cjk-friendly 等，与实现原理相符。"
      },
      {
        "item": "是否存在凭证读取",
        "status": "ok",
        "detail": "「凭证/环境变量」65 条命中均为 ${SKILL_DIR}/$HOME 路径或示例占位，未发现密钥/cookie 读取，判定为无。"
      },
      {
        "item": "main.ts / render.ts 写盘细节",
        "status": "unlocatable",
        "detail": "bundle 只列清单未展开这两份正文，写盘/备份行为以 SKILL.md 描述与扫描行（main.ts:244、render.ts:868）为据，未代码级复核。"
      },
      {
        "item": "URL 命中性质",
        "status": "ok",
        "detail": "193 条 URL 命中绝大多数为注释/文档链接与 highlight.js 语言名；真实执行期网络仅 plantuml fetch，未发现被夸大的外发。"
      },
      {
        "item": "跨 skill 调用 canghe-format-markdown",
        "status": "ok",
        "detail": "SKILL.md Step 0 明写条件式调用，属他人 skill 行为，按范式不参与本 skill 判级。"
      }
    ],
    "level": 1,
    "level_label": "V1 已固定",
    "commit": "dd0bf355955b4c82b764740b4183c86a72ba0e0c",
    "sha256": "1c1036babb2494ed66e0bbdbf1403cad27d4a0c992c73f4db5528f01c577d02a",
    "reviewed_by": null,
    "reviewed_at": null
  },
  "assessed_at": "2026-10-25",
  "method_version": "2.0",
  "mirror": {
    "archive": "https://skillpub.pages.dev/r2/v/2026-10-10/canghe-markdown-to-html.tar.gz",
    "sha256": "1c1036babb2494ed66e0bbdbf1403cad27d4a0c992c73f4db5528f01c577d02a",
    "commit": "dd0bf355955b4c82b764740b4183c86a72ba0e0c"
  },
  "original": {
    "github": "https://github.com/freestylefly/canghe-skills/tree/main/skills/canghe-markdown-to-html",
    "path": "skills/canghe-markdown-to-html",
    "commit": "dd0bf355955b4c82b764740b4183c86a72ba0e0c"
  }
}