{
  "$schema": "https://bestaiskill.com/schemas/agent-install/2.json",
  "skill": "dbs-content-risk-check",
  "built": "2026-10-26",
  "control_level": 1,
  "control_level_label": "L1 基础",
  "capabilities": [],
  "required_controls": {
    "agent": [
      "auto_load"
    ],
    "admin": [
      "register_source_and_version"
    ]
  },
  "evidence": [
    {
      "file": "SKILL.md",
      "summary": "Pure prompt instructions and rule text; no script execution or external impact."
    }
  ],
  "verification": {
    "method": "第二遍独立重读 + 反查（换角度抓第一遍的错）：① `find` 逐文件清点 8 个 skill 目录（含隐藏文件）核对资产面：7 个目录仅 SKILL.md + agents/openai.yaml，dbs-content-system 另有 docs/ scaffold/ templates/ tools/；② 对 8 个目录整体做危险 token 扫描（https?://|fetch(|XMLHttpRequest|axios|curl |wget |child_process|execSync|spawnSync|process\\.env|API_KEY|keychain|eval\\(|new Function）→ ZERO HITS（零网络/零凭证/零任意代码执行面）；③ `grep` 交叉引用检查：SKILL.md 无 `知识库|../|references/` 命中 → 证实自包含声明、不读 skill 目录外内容；④ 与仓库级 README.md + .claude-plugin/marketplace.json 交叉核对：8 个 skill 均已登记（grep 各自名称命中 1）且描述一致；⑤ `git rev-parse HEAD` == 8b8e33f1ecaed8cee606fe950c4426b525ead314，`git remote -v` = dontbesilent2025/dbskill；⑥ GitHub API 核对 license=NOASSERTION/Other（根 LICENSE 实为 CC BY-NC 4.0，含 NonCommercial）、stars 10121、pushed_at 2026-09-07T03:48:59Z；⑦ 功能声明 vs 实际能力夸大检查：每份 description 都能对应到 SKILL.md 内段落。判级口径按批4 统一裁定：只判 skill 自身目录（SKILL.md + 自带脚本/资产），宿主行为与外部平台行为只写进 reason 与 risks；reason 内已按该口径自证。",
    "second_pass": [
      {
        "item": "纯 prompt、无脚本、零端点",
        "status": "ok",
        "detail": "目录仅 SKILL.md(20766B) + agents/openai.yaml(416B)；危险 token 扫描（含 https?://）ZERO HITS —— 全文不出现任何平台域名/API，仅出现平台名称（闲鱼、淘宝、拼多多等）作为名单型信号示例。"
      },
      {
        "item": "双轨判定与「不得互相顶替」",
        "status": "ok",
        "detail": "核心原则两条 +「机器误伤只能写成「可能触发机器审核」，不能补造合理违规原因。」逐字命中。"
      },
      {
        "item": "五表面与三级证据强度",
        "status": "ok",
        "detail": "「### 第二步：检查五个表面」表格 5 行、「### 第三步」三级信号、「只有弱词面线索时保持沉默。」均在原文。"
      },
      {
        "item": "反绕审与禁止编造",
        "status": "ok",
        "detail": "「严禁编造证据、资质、数据、评价、使用经历和活动期限。」与「也不能生成谐音、拆字、藏联系方式、评论暗号或其他绕审写法。」逐字命中。"
      },
      {
        "item": "不打开链接/二维码",
        "status": "ok",
        "detail": "「链接属于待发布文案时，把链接本身作为审核对象，默认不打开网页；」与「去向不明的短链或二维码写「去向未检查」，不能自动打开或扫描；」均在原文。"
      },
      {
        "item": "平台规则查询的触发条件与来源纪律",
        "status": "ok",
        "detail": "条件句与来源句逐字命中；据此判定「外部网络访问由宿主检索工具在条件触发时执行」，不是 skill 自身端点，故不升档（判级只看 skill 自身目录）。"
      },
      {
        "item": "description 与内容相符（无夸大）",
        "status": "ok",
        "detail": "description 声称覆盖标题/正文/图片文字/字幕/口播/评论/账号资料/视频画面，对应五表面 + 12 类机制；「需要明确视频语境边界时额外生成三行贴片」对应「## 视频三行贴片」条件节，未出现「保证通过」类越界承诺。"
      },
      {
        "item": "输出层无绝对结论",
        "status": "ok",
        "detail": "「不写「能发」「不能发」「保证通过」或「100% 合规」。」与「不使用百分比预测违规概率」均在原文。"
      },
      {
        "item": "commit / license / 元数据",
        "status": "ok",
        "detail": "HEAD = 8b8e33f1ecaed8cee606fe950c4426b525ead314；LICENSE = CC BY-NC 4.0（NonCommercial）；stars 10121、pushed_at 2026-09-07T03:48:59Z。"
      },
      {
        "item": "可隐式触发",
        "status": "ok",
        "detail": "无 disable-model-invocation / policy 块 → 用户聊到「这条能不能发」时可能被自动切入；已写入 risks。"
      }
    ],
    "level": 1,
    "level_label": "V1 已固定",
    "commit": "8b8e33f1ecaed8cee606fe950c4426b525ead314",
    "sha256": "fc45138e77038aaabe4b57d4f21315c3ab43c49189f7efd7067e15377ef369ab",
    "reviewed_by": null,
    "reviewed_at": null
  },
  "assessed_at": "2026-10-25",
  "method_version": "2.0",
  "mirror": {
    "archive": "https://skillpub.pages.dev/r2/v/2026-09-15/dbs-content-risk-check.tar.gz",
    "sha256": "fc45138e77038aaabe4b57d4f21315c3ab43c49189f7efd7067e15377ef369ab",
    "commit": "8b8e33f1ecaed8cee606fe950c4426b525ead314"
  },
  "original": {
    "github": "https://github.com/dontbesilent2025/dbskill/tree/main/skills/dbs-content-risk-check",
    "path": "skills/dbs-content-risk-check",
    "commit": "8b8e33f1ecaed8cee606fe950c4426b525ead314"
  }
}