{
  "$schema": "https://bestaiskill.com/schemas/agent-install/2.json",
  "skill": "canopy-part-title",
  "built": "2026-10-26",
  "control_level": 4,
  "control_level_label": "L4 高权限",
  "capabilities": [
    "execute_command",
    "network"
  ],
  "required_controls": {
    "agent": [
      "sandbox_recommended",
      "graded_authorization"
    ],
    "admin": [
      "approval_process",
      "rollback_support",
      "full_audit"
    ]
  },
  "evidence": [
    {
      "file": "scripts/",
      "summary": "Executes local script or command: canopy-part-title.html — Composition script executed by the renderer/browser (importmap pulls three 0.170.0)"
    },
    {
      "file": "网络端点",
      "summary": "Declares external network access: cdn.jsdelivr.net/npm/gsap@3.14.2/dist/gsap.min.js (artifact phase: browser execution)"
    }
  ],
  "verification": {
    "method": "第二遍独立重读 + 反查（不看第一遍结论）：① 文件级清点（find 全目录）并核对 registry-item.json 的 files 清单与盘上文件的差集；② 端点与敏感关键词扫描（http(s)://、process.env|secret|token|api_key|cookie|sudo|sandbox）；③ 确定性扫描（Math.random / Date.now / performance.now / requestAnimationFrame）；④ 变量数三方对齐（frontmatter 自称 ↔ SKILL.md 变量表行数 ↔ html data-composition-variables 项数）与 duration 一致性；⑤ 每条 evidence.quote 回源 pin 源文逐字校验（含 … 分段按序命中）。",
    "second_pass": [
      {
        "item": "变量数与声明一致性（frontmatter 自称 11 variables）",
        "status": "ok",
        "detail": "脚本实测：SKILL.md 变量表 11 行、composition 的 data-composition-variables 解析出 11 项、frontmatter 写 11 —— 三者一致。"
      },
      {
        "item": "「无 Math.random / Date.now / rAF」声称",
        "status": "ok",
        "detail": "对 html 全文 grep：Math.random、Date.now、performance.now、requestAnimationFrame 零命中；注释逐字写着 Zero Math.random，随机全部来自 mulberry32 常数种子（主批次 0x6a756e67、抬升批 0x6c696674）。"
      },
      {
        "item": "外部依赖单真实性",
        "status": "ok",
        "detail": "html 第 16 行 gsap 脚本、第 333–340 行 importmap 与三个 postprocessing import、第 10–13 行 Google Fonts link 均逐字命中；SKILL.md 的 External runtime dependencies 行与之一致。"
      },
      {
        "item": "凭证/密钥接触面",
        "status": "ok",
        "detail": "对 SKILL.md / html / registry-item.json 扫描 process.env、secret、token、api_key、cookie：零命中。"
      },
      {
        "item": "registry-item 文件清单 vs 盘上文件",
        "status": "ok",
        "detail": "声明 4 个文件全部存在，且无远端 url 兜底（与本块不依赖远端二进制一致）。"
      },
      {
        "item": "时长与尺寸一致性",
        "status": "ok",
        "detail": "registry-item duration 12 / dimensions 1920×1080 与 html data-duration=\"12\"、SKILL.md 标题行 12s 一致。"
      }
    ],
    "level": 1,
    "level_label": "V1 已固定",
    "commit": "d2f0bc7f34837da54ae22063772d75d75ce26477",
    "sha256": "92b16eff05db15f7bbc2432361a8fdec765ac8fbf06a00d4db6bf3a39c20fb83",
    "reviewed_by": null,
    "reviewed_at": null
  },
  "assessed_at": "2026-10-25",
  "method_version": "2.0",
  "mirror": {
    "archive": "https://skillpub.pages.dev/r2/v/2026-09-28/canopy-part-title.tar.gz",
    "sha256": "92b16eff05db15f7bbc2432361a8fdec765ac8fbf06a00d4db6bf3a39c20fb83",
    "commit": "d2f0bc7f34837da54ae22063772d75d75ce26477"
  },
  "original": {
    "github": "https://github.com/heygen-com/hyperframes/tree/main/registry/blocks/canopy-part-title",
    "path": "registry/blocks/canopy-part-title",
    "commit": "d2f0bc7f34837da54ae22063772d75d75ce26477"
  }
}