{
  "$schema": "https://bestaiskill.com/schemas/agent-install/2.json",
  "skill": "dbs-skill-maker",
  "built": "2026-10-26",
  "control_level": 4,
  "control_level_label": "L4 高权限",
  "capabilities": [
    "execute_command",
    "external_write",
    "network",
    "write_file"
  ],
  "required_controls": {
    "agent": [
      "sandbox_recommended",
      "graded_authorization"
    ],
    "admin": [
      "approval_process",
      "rollback_support",
      "full_audit"
    ]
  },
  "evidence": [
    {
      "file": "scripts/",
      "summary": "Execute local scripts or commands: python3 scripts/init_skill_project.py <skill-name> --output <parent_dir> (generates new Skill)"
    },
    {
      "file": "外部 API",
      "summary": "Perform posts, resource creation, or write operations on external platforms"
    },
    {
      "file": "本地工作目录",
      "summary": "File read/write and artifact output: Create new Skill directories and files in user-specified parent directory (init_skill_project.py, refuses to overwrite existing real directories)"
    }
  ],
  "verification": {
    "method": "第二遍独立重读 + 反查：① 资产面清点：find 列出 11 个文件（SKILL.md、agents/openai.yaml、5 references、4 scripts），逐个读取确认用途，无隐藏文件、无二进制；② 脚本行为核对：init_skill_project.py 读全文确认\"不覆盖\"；validate_skill_project.py 确认含 UNFINISHED_MARKERS / LOCAL_PATH_PATTERN / SECRET_PATTERN / ALLOWED_ROOT_ENTRIES；prepare_github_repo.py 确认只写 staging、拒绝软链、生成 README；verify_npx_install.sh 确认临时 HOME + npx + cmp 逐文件验证 + trap cleanup；③ 外部依赖反查：全目录扫描 npx/gh/git/push/curl/http 等 token，确认网络仅出现在自带 npx 安装验证脚本与远端发布文档两处，其余为本地 python；④ 与仓库定位交叉核对：README.md 能力表\"把反复问题制作成单个 Skill → /dbs-skill-maker\"与 SKILL.md 定位一致；⑤ 分级依据：目录内脚本只做本地读写，外發仅由官方生态安装器与用户授权的 git/gh 发布产生，按批4终版口径落 🟡。",
    "second_pass": [
      {
        "item": "SKILL.md 的状态路由表真实存在且引用文件齐全",
        "status": "ok",
        "detail": "7 行路由表引用的 5 个 references 文件全部存在于 skills/dbs-skill-maker/references/。"
      },
      {
        "item": "四个脚本各自用途与宣称一致",
        "status": "ok",
        "detail": "init/validate/prepare 三个 python 脚本 + 1 个 bash 安装验证脚本，均实读确认；validate 内确有 subprocess 用于 py 语法检查。"
      },
      {
        "item": "\"准备仓库不等于获得远端写入授权\"可定位",
        "status": "ok",
        "detail": "SKILL.md「GitHub 发布边界」节原文含该句；github-publishing.md「授权边界」节给出同义规则。"
      },
      {
        "item": "安装验证不是文字检查而是真装",
        "status": "ok",
        "detail": "verify_npx_install.sh 用 mktemp 临时 HOME 执行 npx skills add，并逐文件 cmp 源目录与安装结果，输出\"安装验证通过\"计数。"
      },
      {
        "item": "网络/远端依赖清单无遗漏",
        "status": "ok",
        "detail": "目录级扫描仅命中 npx（verify 脚本与 SKILL.md 安装命令）、git/gh、GitHub/npm 相关文本；三个 python 脚本无 urllib/requests/socket 调用。"
      },
      {
        "item": "是否读取用户凭证",
        "status": "ok",
        "detail": "三个 python 脚本均无读取 ~/.gitconfig、gh 配置或 env 中 token 的代码；SECRET_PATTERN 仅用于扫描候选文件中的疑似密钥以拦截外泄。"
      },
      {
        "item": "\"不覆盖现有真实目录\"是否属实",
        "status": "ok",
        "detail": "init_skill_project.py docstring 为 \"Create a minimal single-Skill project without overwriting existing files.\"，并含同名冲突检查。"
      },
      {
        "item": "分级验证等级表与\"只能报第 1 级\"",
        "status": "ok",
        "detail": "SKILL.md「未实际运行行为任务时，只能报告第 1 级。」与四级表格并存，无夸大表述。"
      },
      {
        "item": "validate 脚本运行时的具体子进程命令",
        "status": "unlocatable",
        "detail": "validate_skill_project.py 用 subprocess 做语法检查，但具体命令依赖运行环境（解释器路径/可用工具），无法仅凭源码枚举其全部运行时行为，故标为不可完全定位项。"
      }
    ],
    "level": 1,
    "level_label": "V1 已固定",
    "commit": "8b8e33f1ecaed8cee606fe950c4426b525ead314",
    "sha256": "e296c070f776d446a352427fe11bdd3675da2291875be39a49ea938b2bb39008",
    "reviewed_by": null,
    "reviewed_at": null
  },
  "assessed_at": "2026-10-25",
  "method_version": "2.0",
  "mirror": {
    "archive": "https://skillpub.pages.dev/r2/v/2026-09-15/dbs-skill-maker.tar.gz",
    "sha256": "e296c070f776d446a352427fe11bdd3675da2291875be39a49ea938b2bb39008",
    "commit": "8b8e33f1ecaed8cee606fe950c4426b525ead314"
  },
  "original": {
    "github": "https://github.com/dontbesilent2025/dbskill/tree/main/skills/dbs-skill-maker",
    "path": "skills/dbs-skill-maker",
    "commit": "8b8e33f1ecaed8cee606fe950c4426b525ead314"
  }
}