{
  "$schema": "https://bestaiskill.com/schemas/agent-install/2.json",
  "skill": "dbs-report",
  "built": "2026-10-26",
  "control_level": 3,
  "control_level_label": "L3 联网",
  "capabilities": [
    "network",
    "write_file"
  ],
  "required_controls": {
    "agent": [
      "declare_domain_and_key_scope"
    ],
    "admin": [
      "least_privilege_keys",
      "keep_request_logs"
    ]
  },
  "evidence": [
    {
      "file": "环境变量 / API Key",
      "summary": "Read vendor service credentials: Reads .dbs/config.json to resolve the archive root directory (mode=default/project/custom + root) — this is the user's own configuration"
    },
    {
      "file": "本地工作目录",
      "summary": "File read/write and artifact output: {archive_root}/reports/{project_slug}/{YYYYMMDD-HHMMSS}-{project_slug}.md (new reports, never overwritten; executes mkdir -p if the directory does not exist)"
    }
  ],
  "verification": {
    "method": "第二遍独立重读 + 反查：① 全目录 token 扫描（curl/wget/http/api_key/token/secret/bash/exec/pdf 转换命令）零命中——特别复核「不主动出 PDF/HTML」是否为真（文中只有该禁令，无任何转换命令）；② 复核配置解析小节与 dbs-save/dbs-restore 的规则是否逐字一致（三模式 + 停止条件 + 只读不写），结论一致；③ 反查「永不覆盖」是否有例外——路径含时间戳、无覆盖分支，成立；④ 复核 0/1/≥2 份存档的三分支处理与 --since 过滤后的再次判定；⑤ 复核六段结构中哪些是搬运、哪些允许总结（只有「一、用户主诉的演进」末段允许，且有「不引申、不推测、不发挥」限定）；⑥ 交叉核对仓库 README.md 对存档位置（~/.dbs/）与报告定位的描述，与 SKILL.md 一致；⑦ 检查「敏感信息不脱敏」该条是否为孤例——dbs-save 侧确有对应要求（存档目录为本地纯文本、无加密，需用户确认），说明脱敏责任前移的链路完整。",
    "second_pass": [
      {
        "item": "外部资源/工具：是否存在未声明的依赖或格式转换器",
        "status": "ok",
        "detail": "无 URL、无包、无 CLI 调用；PDF/HTML 相关语句只有禁止性的（不主动出 PDF / HTML / 其他格式）。external_deps 空数组成立。"
      },
      {
        "item": "安全结论：写入面是否只有报告文件",
        "status": "ok",
        "detail": "全文写入只有 mkdir -p 与报告文件生成；明确不修改 .dbs/config.json（「只读取配置，不修改配置」），不删除任何存档，不改写原始 sessions 文件。"
      },
      {
        "item": "实现原理是否成立：报告能否真正做到「每条可追溯」",
        "status": "ok",
        "detail": "六段中五段规定逐条携带来源（「· 出自 {对应存档的标题} · {对应日期}」）、附录给出文件名索引表，「结论冲突两条都列」避免丢失信息。机制可核查。"
      },
      {
        "item": "功能声明 vs 实际能力是否存在夸大",
        "status": "ok",
        "detail": "description 只说「合并成可交付的 Markdown 报告」，未承诺分析深度或结论质量；SKILL.md 亦把「总结」限制到一段。一致。"
      },
      {
        "item": "证据定位：仓库级元数据（stars/last_push）与 installs",
        "status": "unlocatable",
        "detail": "stars=10121、last_push=2026-09-07 来自站点池 data/pool.json（GitHub API 采集），pin 本地副本无法逐字定位；installs 未采集记 null。license 可在仓库根 LICENSE 逐字命中。"
      }
    ],
    "level": 1,
    "level_label": "V1 已固定",
    "commit": "8b8e33f1ecaed8cee606fe950c4426b525ead314",
    "sha256": "1daf478be83e49eac16305296bdcc50713ecc98ffc9466c9e05c06aab746d44b",
    "reviewed_by": null,
    "reviewed_at": null
  },
  "assessed_at": "2026-10-25",
  "method_version": "2.0",
  "mirror": {
    "archive": "https://skillpub.pages.dev/r2/v/2026-09-15/dbs-report.tar.gz",
    "sha256": "1daf478be83e49eac16305296bdcc50713ecc98ffc9466c9e05c06aab746d44b",
    "commit": "8b8e33f1ecaed8cee606fe950c4426b525ead314"
  },
  "original": {
    "github": "https://github.com/dontbesilent2025/dbskill/tree/main/skills/dbs-report",
    "path": "skills/dbs-report",
    "commit": "8b8e33f1ecaed8cee606fe950c4426b525ead314"
  }
}