{
  "$schema": "https://bestaiskill.com/schemas/agent-install/2.json",
  "skill": "canghe-post-to-x",
  "built": "2026-10-26",
  "control_level": 5,
  "control_level_label": "L5 严管",
  "capabilities": [
    "terms_compliance",
    "credential",
    "execute_command",
    "network",
    "write_file"
  ],
  "required_controls": {
    "agent": [
      "isolated_environment",
      "per_use_authorization"
    ],
    "admin": [
      "strict_authorization",
      "full_audit",
      "compliance_signoff"
    ]
  },
  "evidence": [
    {
      "file": "SKILL.md / 脚本参数",
      "summary": "Includes bypassing automation detection, disabling host sandbox, or skipping SSL certificate verification"
    },
    {
      "file": "SKILL.md / 会话存储",
      "summary": "Reads or reuses browser user login state and session cookies"
    },
    {
      "file": "scripts/",
      "summary": "Executes local scripts or commands: npx -y bun ${SKILL_DIR}/scripts/x-browser.ts / x-video.ts / x-quote.ts / x-"
    },
    {
      "file": "网络端点",
      "summary": "Declares external network access: CDP port discovery http://127.0.0.1:<port>/json/version and WebSocket connection to CDP (x-utils.ts"
    },
    {
      "file": "本地工作目录",
      "summary": "File read/write and artifact output: Chrome profile directory (configurable via X_BROWSER_CHROME_PATH / profile arguments)"
    }
  ],
  "verification": {
    "method": "第二遍独立于第一遍：重新通读 bundle §2（SKILL.md / 两份 references / paste-from-clipboard.ts / package.json / bun.lock）、§1 清单与 §3 风险扫描命中行，逐条核对 Chrome/CDP 路线、绕过手法、剪贴板子系统与安全结论；未展开的 x-browser/x-video/x-quote/x-article.ts 正文不臆测。",
    "second_pass": [
      {
        "item": "反自动化绕过动机",
        "status": "ok",
        "detail": "SKILL.md 描述、regular-posts.md 的 How It Works 与 paste-from-clipboard.ts 顶部注释三处一致声明绕过检测。"
      },
      {
        "item": "AutomationControlled 标志",
        "status": "ok",
        "detail": "风险扫描在 x-article.ts:117 / x-browser.ts:44 / x-quote.ts:48 / x-video.ts:48 四处定位同一参数，判红据成立。"
      },
      {
        "item": "四条内容路径",
        "status": "ok",
        "detail": "SKILL.md Script Reference 与各命令行示例互证 x-browser/x-video/x-quote/x-article 四个入口。"
      },
      {
        "item": "剪贴板/键击跨平台适配",
        "status": "ok",
        "detail": "paste-from-clipboard.ts 正文完整展开，pasteMac/pasteLinux/pasteWindows 分派逐字可核。"
      },
      {
        "item": "长文占位符机制",
        "status": "ok",
        "detail": "articles.md 的 images XIMGPH_n 与 Workflow 第 8 步『反向替换』描述自洽。"
      },
      {
        "item": "凭证读取",
        "status": "ok",
        "detail": "「凭证/环境变量」39 条命中均为 ${SKILL_DIR}/$HOME/profile 参数与示例，未见密钥/cookie 文件读取；凭据即 profile 登录态，与结论一致。"
      },
      {
        "item": "主脚本的 CDP DOM 细节",
        "status": "unlocatable",
        "detail": "x-browser/x-video/x-quote/x-article.ts 全文未在 bundle 展开，文本注入与 DOM 操作细节以 SKILL.md/references 描述与扫描行为据，未代码级复核。"
      },
      {
        "item": "Playwright MCP 引用",
        "status": "ok",
        "detail": "仅出现在 regular-posts.md 的可选手工工作流示例，非脚本内置依赖，不改变档位。"
      }
    ],
    "level": 2,
    "level_label": "V2 已复核",
    "commit": "dd0bf355955b4c82b764740b4183c86a72ba0e0c",
    "sha256": "aa885729a2c33e40f571702d88797884a5694fd42a3e91365b643cad39bfbd2c",
    "reviewed_by": "skills-bayx-audit",
    "reviewed_at": "2026-10-25"
  },
  "assessed_at": "2026-10-25",
  "method_version": "2.0",
  "mirror": {
    "archive": "https://skillpub.pages.dev/r2/v/2026-10-10/canghe-post-to-x.tar.gz",
    "sha256": "aa885729a2c33e40f571702d88797884a5694fd42a3e91365b643cad39bfbd2c",
    "commit": "dd0bf355955b4c82b764740b4183c86a72ba0e0c"
  },
  "original": {
    "github": "https://github.com/freestylefly/canghe-skills/tree/main/skills/canghe-post-to-x",
    "path": "skills/canghe-post-to-x",
    "commit": "dd0bf355955b4c82b764740b4183c86a72ba0e0c"
  }
}