{
  "$schema": "https://bestaiskill.com/schemas/agent-install/2.json",
  "skill": "canghe-url-to-markdown",
  "built": "2026-10-26",
  "control_level": 4,
  "control_level_label": "L4 高权限",
  "capabilities": [
    "execute_command",
    "network",
    "write_file"
  ],
  "required_controls": {
    "agent": [
      "sandbox_recommended",
      "graded_authorization"
    ],
    "admin": [
      "approval_process",
      "rollback_support",
      "full_audit"
    ]
  },
  "evidence": [
    {
      "file": "scripts/",
      "summary": "Executes local script or command: npx -y bun ${SKILL_DIR}/scripts/main.ts <url> [--wait] [-o out.md] [--timeo"
    },
    {
      "file": "网络端点",
      "summary": "Declares external network access: User-specified target URL: real browser loads the page (including its sub-resources and page-initiated requests)"
    },
    {
      "file": "本地工作目录",
      "summary": "File read/write and artifact output: url-to-markdown/<domain>/<slug>.md (body + YAML metadata)"
    }
  ],
  "verification": {
    "method": "第一遍：通读 bundle 展開的 SKILL.md（脚本清单、两种模式、输出格式、输出目录、环境变量、排错）与 cdp.ts/main.ts/html-to-markdown.ts/paths.ts 关键段。第二遍：独立逐条回 §2 原文核对 evidence.file/quote 与行为面（网络、写盘、凭证），并对照判级范式与同仓上游 baoyu-url-to-markdown 的红档先例复核 yellow 判定。",
    "second_pass": [
      {
        "item": "网络调用定位",
        "status": "ok",
        "detail": "风险扫描『網路請求』命中 cdp.ts 的 fetch/WebSocket 与 http://127.0.0.1:${port}/json/version；均为本机调试端口，目标页网络由 Chrome 自身发起。"
      },
      {
        "item": "不读凭证",
        "status": "ok",
        "detail": "风险扫描『憑證/環境變數』命中项均为路径/目录类（URL_CHROME_PATH/URL_DATA_DIR/URL_CHROME_PROFILE_DIR/APPDATA/XDG_DATA_HOME）与 ${SKILL_DIR}/$HOME 文档文本，无密钥/cookie 读取。"
      },
      {
        "item": "独立 profile 而非用户主 profile",
        "status": "ok",
        "detail": "paths.ts resolveUrlToMarkdownChromeProfileDir 指向用户数据根/canghe-skills/url-to-markdown/chrome-profile。"
      },
      {
        "item": "无站点适配器/无冒充",
        "status": "ok",
        "detail": "§1 清单只有 6 个文件，无 X/YouTube 等适配器；cdp.ts 无 InnerTube/UA 伪装类代码，与上游 baoyu-url-to-markdown 的红档成因不同。"
      },
      {
        "item": "无安全降级",
        "status": "ok",
        "detail": "风险扫描『危險旗標/防護繞過』与『沙箱/未受控執行』均无命中；未见 remote-allow-origins=*/--no-verify 等。"
      },
      {
        "item": "两模式与写盘路径属实",
        "status": "ok",
        "detail": "main.ts 的 waitForUserSignal 打印 'Press Enter when ready to capture...'；main.ts 以 writeFile(outputPath,...,'utf-8') 落盘。"
      },
      {
        "item": "档位复核",
        "status": "ok",
        "detail": "有常规网络调用、无凭证、无绕过 → yellow；相较上游红档按证据差异降档，已在 reason 说明。"
      },
      {
        "item": "元数据与 commit",
        "status": "ok",
        "detail": "commit=dd0bf355955b4c82b764740b4183c86a72ba0e0c，license=MIT（仓库根），installs=null。"
      }
    ],
    "level": 1,
    "level_label": "V1 已固定",
    "commit": "dd0bf355955b4c82b764740b4183c86a72ba0e0c",
    "sha256": "bc953895075e756e51b6f3c190b607889bea154b2c0da9493c9044aafed42f2e",
    "reviewed_by": null,
    "reviewed_at": null
  },
  "assessed_at": "2026-10-25",
  "method_version": "2.0",
  "mirror": {
    "archive": "https://skillpub.pages.dev/r2/v/2026-10-10/canghe-url-to-markdown.tar.gz",
    "sha256": "bc953895075e756e51b6f3c190b607889bea154b2c0da9493c9044aafed42f2e",
    "commit": "dd0bf355955b4c82b764740b4183c86a72ba0e0c"
  },
  "original": {
    "github": "https://github.com/freestylefly/canghe-skills/tree/main/skills/canghe-url-to-markdown",
    "path": "skills/canghe-url-to-markdown",
    "commit": "dd0bf355955b4c82b764740b4183c86a72ba0e0c"
  }
}