{
  "$schema": "https://bestaiskill.com/schemas/agent-install/2.json",
  "skill": "cut-mistakes",
  "built": "2026-10-26",
  "control_level": 4,
  "control_level_label": "L4 高权限",
  "capabilities": [
    "execute_command",
    "network",
    "write_file"
  ],
  "required_controls": {
    "agent": [
      "sandbox_recommended",
      "graded_authorization"
    ],
    "admin": [
      "approval_process",
      "rollback_support",
      "full_audit"
    ]
  },
  "evidence": [
    {
      "file": "scripts/",
      "summary": "Local script or command execution: node .claude/skills/cut-mistakes/scripts/find-cut-candidates.mjs <transcrip"
    },
    {
      "file": "网络端点",
      "summary": "External network access declaration: The sole HTTP surface is `npx serve . -p 8080 -n` during human review—a local static server that only serves generated review HTML without uploading media"
    },
    {
      "file": "本地工作目录",
      "summary": "File I/O and artifact output: <stem>.cut-candidates.json / <stem>.cut-candidates.md (written alongside transcript by default, or to --out-dir)"
    }
  ],
  "verification": {
    "method": "第二遍独立核对（换角度抓第一遍的错）：① 目录全量文件清点（find -type f = 3 个文件），核对 SKILL.md 自称的产物与脚本实际 writeFileSync 目标是否一一对应；② 全目录 token 扫描（URL / fetch / http / spawnSync / execSync / process.env / API_KEY|TOKEN|SECRET / eval）逐条打开确认；③ 逐条重读阈值与判据（0.5s closeGap、0.85s/7.5s/16s 分段、0.34/0.24 Jaccard、firstLen<6 与 <12s 假起点），核对 claim 与代码是否一致；④ 反查「是否真的 review-gated」：确认 apply-cuts 只吃 --cuts 文件、find 脚本不写任何自动批准路径；⑤ 核对 SKILL.md 命令行与脚本 argv 解析（<transcript> + --out-dir）是否一致。",
    "second_pass": [
      {
        "item": "目录文件清单与产物对照",
        "status": "ok",
        "detail": "3 个文件（SKILL.md、find-cut-candidates.mjs、apply-cuts.mjs）；SKILL.md 承诺的 *.cut-candidates.json/.md 与 *.mistakes-edl.json/transcript.json/decisions.md/filter.txt 均在两个脚本的 writeFileSync 目标中逐一定位到。"
      },
      {
        "item": "网络面反例搜索",
        "status": "ok",
        "detail": "目录内 0 处 fetch/https 导入；唯一 URL 形态字样是 SKILL.md 的本地命令 `npx serve . -p 8080 -n` 与仓库级脚本名，不构成执行期外发。"
      },
      {
        "item": "凭证面反例搜索",
        "status": "ok",
        "detail": "0 处 process.env/API_KEY/TOKEN/.env；spawnSync 列表仅 ffprobe/ffmpeg，环境变量未被子进程继承修改。"
      },
      {
        "item": "「只渲染已批准切点」是否被代码强制",
        "status": "ok",
        "detail": "apply-cuts.mjs 第 49-51 行以 --cuts 文件为唯一输入并校验数组与非空范围；find-cut-candidates.mjs 不含任何写视频/批准逻辑，两脚本互不自动串接。"
      },
      {
        "item": "文档参数 vs 脚本 argv",
        "status": "ok",
        "detail": "find 脚本解析 <transcript> 与 --out-dir（Usage 行自述一致）；SKILL.md 给的命令两种形态都能对上。apply-cuts 解析 --cuts/--video/--output/--out-dir/--apply，与 SKILL.md 的调用示例逐项一致。"
      },
      {
        "item": "上游转录服务是否被算作本 skill 行为",
        "status": "ok",
        "detail": "SKILL.md 只写「Requires a word-level transcript」，未指名任何服务或 key；ElevenLabs helper 属仓库级 scripts/，故按『判级对象＝skill 自身目录』记入 reason/risks 而不改档。"
      }
    ],
    "level": 1,
    "level_label": "V1 已固定",
    "commit": "0d30152a82b9ceb93cfdd9bdbf46f0d5ab3cde86",
    "sha256": "fca023adfb7af7d93e0eceee2248a7ff8c0dd987163bf0afc4e64bd7afee4f87",
    "reviewed_by": null,
    "reviewed_at": null
  },
  "assessed_at": "2026-10-25",
  "method_version": "2.0",
  "mirror": {
    "archive": "https://skillpub.pages.dev/r2/v/2026-09-28/cut-mistakes.tar.gz",
    "sha256": "fca023adfb7af7d93e0eceee2248a7ff8c0dd987163bf0afc4e64bd7afee4f87",
    "commit": "0d30152a82b9ceb93cfdd9bdbf46f0d5ab3cde86"
  },
  "original": {
    "github": "https://github.com/nateherkai/hyperframes-student-kit/tree/main/.claude/skills/cut-mistakes",
    "path": ".claude/skills/cut-mistakes",
    "commit": "0d30152a82b9ceb93cfdd9bdbf46f0d5ab3cde86"
  }
}