{
  "$schema": "https://bestaiskill.com/schemas/agent-install/2.json",
  "skill": "dbs-hook",
  "built": "2026-10-26",
  "control_level": 1,
  "control_level_label": "L1 基础",
  "capabilities": [],
  "required_controls": {
    "agent": [
      "auto_load"
    ],
    "admin": [
      "register_source_and_version"
    ]
  },
  "evidence": [
    {
      "file": "SKILL.md",
      "summary": "Pure prompt instructions and rule text; no script execution or external side effects"
    }
  ],
  "verification": {
    "method": "第二遍独立重读 + 反查（换角度抓第一遍的错）：① `find` 逐文件清点 8 个 skill 目录（含隐藏文件）核对资产面：7 个目录仅 SKILL.md + agents/openai.yaml，dbs-content-system 另有 docs/ scaffold/ templates/ tools/；② 对 8 个目录整体做危险 token 扫描（https?://|fetch(|XMLHttpRequest|axios|curl |wget |child_process|execSync|spawnSync|process\\.env|API_KEY|keychain|eval\\(|new Function）→ ZERO HITS（零网络/零凭证/零任意代码执行面）；③ `grep` 交叉引用检查：SKILL.md 无 `知识库|../|references/` 命中 → 证实自包含声明、不读 skill 目录外内容；④ 与仓库级 README.md + .claude-plugin/marketplace.json 交叉核对：8 个 skill 均已登记（grep 各自名称命中 1）且描述一致；⑤ `git rev-parse HEAD` == 8b8e33f1ecaed8cee606fe950c4426b525ead314，`git remote -v` = dontbesilent2025/dbskill；⑥ GitHub API 核对 license=NOASSERTION/Other（根 LICENSE 实为 CC BY-NC 4.0，含 NonCommercial）、stars 10121、pushed_at 2026-09-07T03:48:59Z；⑦ 功能声明 vs 实际能力夸大检查：每份 description 都能对应到 SKILL.md 内段落。判级口径按批4 统一裁定：只判 skill 自身目录（SKILL.md + 自带脚本/资产），宿主行为与外部平台行为只写进 reason 与 risks；reason 内已按该口径自证。",
    "second_pass": [
      {
        "item": "纯 prompt、目录内无脚本",
        "status": "ok",
        "detail": "find 逐文件清点：skills/dbs-hook/ 仅 SKILL.md(9896B) + agents/openai.yaml(237B)；危险 token 扫描零命中。"
      },
      {
        "item": "官方 description 逐字保留",
        "status": "ok",
        "detail": "meta.official_desc 由脚本直接从 SKILL.md frontmatter 的 description 行提取，未改写；并校验其仍是 SKILL.md 子串。"
      },
      {
        "item": "「停止优化」门禁真实存在",
        "status": "ok",
        "detail": "SKILL.md 表格与素材维度两处均含「**停止优化。**」及配套话术，非夸大描述。"
      },
      {
        "item": "三方法 10-15 条与 Top 3 模板",
        "status": "ok",
        "detail": "正文原文「用三种方法生成开头，每种方法 3-5 条，总共 10-15 条。」与 Phase 5 模板一致。"
      },
      {
        "item": "外部依赖为空",
        "status": "ok",
        "detail": "全文无 URL、无 CLI 调用、无包依赖；扫描 https?://|curl|wget|fetch(|process.env 零命中。"
      },
      {
        "item": "无写盘/无凭证读取",
        "status": "ok",
        "detail": "skill 不指示保存文件，也不读取任何 env/密钥；产出为对话内 markdown。"
      },
      {
        "item": "commit 与 pin 一致",
        "status": "ok",
        "detail": "git rev-parse HEAD = 8b8e33f1ecaed8cee606fe950c4426b525ead314（短 8b8e33f1ecae），与任务表 pin 一致；remote = dontbesilent2025/dbskill。"
      },
      {
        "item": "license 如实（非商业）",
        "status": "ok",
        "detail": "根 LICENSE 首行为 \"Attribution-NonCommercial 4.0 International (CC BY-NC 4.0)\"，含 \"You may not use the material for commercial purposes\"；GitHub API license.spdx_id=NOASSERTION，已在 meta.license 如实写明。"
      },
      {
        "item": "触发方式",
        "status": "ok",
        "detail": "frontmatter 无 disable-model-invocation、agents/openai.yaml 无 policy 块 → 模型可隐式触发；已写入 risks，不作为安全档位依据。"
      },
      {
        "item": "与 README / marketplace 描述一致",
        "status": "ok",
        "detail": ".claude-plugin/marketplace.json 与 README.md 对 dbs-hook 的定位与 SKILL.md 一致（短视频开头诊断/优化），无功能夸大。"
      }
    ],
    "level": 1,
    "level_label": "V1 已固定",
    "commit": "8b8e33f1ecaed8cee606fe950c4426b525ead314",
    "sha256": "1927a485905423c0915690b1b7fa6c4495a5b4ae62dc2dde6cfaad763ee97d42",
    "reviewed_by": null,
    "reviewed_at": null
  },
  "assessed_at": "2026-10-25",
  "method_version": "2.0",
  "mirror": {
    "archive": "https://skillpub.pages.dev/r2/v/2026-09-15/dbs-hook.tar.gz",
    "sha256": "1927a485905423c0915690b1b7fa6c4495a5b4ae62dc2dde6cfaad763ee97d42",
    "commit": "8b8e33f1ecaed8cee606fe950c4426b525ead314"
  },
  "original": {
    "github": "https://github.com/dontbesilent2025/dbskill/tree/main/skills/dbs-hook",
    "path": "skills/dbs-hook",
    "commit": "8b8e33f1ecaed8cee606fe950c4426b525ead314"
  }
}