{
  "$schema": "https://bestaiskill.com/schemas/agent-install/2.json",
  "skill": "canghe-xhs-images",
  "built": "2026-10-26",
  "control_level": 4,
  "control_level_label": "L4 高权限",
  "capabilities": [
    "execute_command",
    "write_file"
  ],
  "required_controls": {
    "agent": [
      "sandbox_recommended",
      "graded_authorization"
    ],
    "admin": [
      "approval_process",
      "rollback_support",
      "full_audit"
    ]
  },
  "evidence": [
    {
      "file": "scripts/",
      "summary": "Executes local script or command: references/workflows/prompt-assembly.md instructs to run `npx -y bun ${SKILL_DIR}/script"
    },
    {
      "file": "本地工作目录",
      "summary": "File read/write and artifact output: Writes analysis, outlines, prompts, and images to the session directory: `xhs-images/{topic-slug}/` (analysis.md, outline-stra"
    }
  ],
  "verification": {
    "method": "第一遍通读 SKILL.md 与 references 全量取证（工作流、风格/版式表、确认门、文件结构）；第二遍不沿用结论，重读关键段落并对照 §3 风险扫描逐类回源核实，重点找外部程序/网络/凭证的反例。",
    "second_pass": [
      {
        "item": "外部程序：npx -y bun scripts/main.ts 确实存在",
        "status": "ok",
        "detail": "扫到 prompt-assembly.md:170 一行；但本 skill 目录清单（§1）无 scripts/ 目录，判定属仓库级资产、非本目录执行。"
      },
      {
        "item": "网络请求／恶意外发",
        "status": "ok",
        "detail": "§3 网络请求 0 命中；SKILL.md 与 references 无域名级调用代码。"
      },
      {
        "item": "凭证/环境变量读取",
        "status": "ok",
        "detail": "仅 $HOME 用于定位 EXTEND.md 路径，非凭据泄露。"
      },
      {
        "item": "写盘范围",
        "status": "ok",
        "detail": "写盘 0 命中（正则为线索）；正文明确写入会话目录 xhs-images/{topic-slug}/，属产物。"
      },
      {
        "item": "风格/版式枚举与 SKILL.md 声明一致",
        "status": "ok",
        "detail": "§1 列 10 个 presets 文件、4 个 elements 文件、3 个 workflows、3 个 config，与正文引用一致。"
      },
      {
        "item": "是否夸大能力",
        "status": "ok",
        "detail": "description 声称 10 风格 8 版式 1-10 图，正文 Style/Layout Gallery 与样式矩阵可对应，未夸大。"
      }
    ],
    "level": 1,
    "level_label": "V1 已固定",
    "commit": "dd0bf355955b4c82b764740b4183c86a72ba0e0c",
    "sha256": "d19d5f23ade997a5f346457265a236094ad5710b808df84f638f25eb4a25ac2d",
    "reviewed_by": null,
    "reviewed_at": null
  },
  "assessed_at": "2026-10-25",
  "method_version": "2.0",
  "mirror": {
    "archive": "https://skillpub.pages.dev/r2/v/2026-10-10/canghe-xhs-images.tar.gz",
    "sha256": "d19d5f23ade997a5f346457265a236094ad5710b808df84f638f25eb4a25ac2d",
    "commit": "dd0bf355955b4c82b764740b4183c86a72ba0e0c"
  },
  "original": {
    "github": "https://github.com/freestylefly/canghe-skills/tree/main/skills/canghe-xhs-images",
    "path": "skills/canghe-xhs-images",
    "commit": "dd0bf355955b4c82b764740b4183c86a72ba0e0c"
  }
}