{
  "$schema": "https://bestaiskill.com/schemas/agent-install/2.json",
  "skill": "dbs-wechat-html",
  "built": "2026-10-26",
  "control_level": 2,
  "control_level_label": "L2 本地",
  "capabilities": [
    "write_file"
  ],
  "required_controls": {
    "agent": [
      "restrict_working_directory"
    ],
    "admin": [
      "keep_operation_logs"
    ]
  },
  "evidence": [
    {
      "file": "本地工作目录",
      "summary": "File I/O and artifact generation: generates HTML files in the 公众号HTML输出/ directory alongside the source Markdown (filenames include style id and style name)"
    }
  ],
  "verification": {
    "method": "第二遍独立重读 + 反查：① 资产面：find 确认 3 个文件（SKILL.md、agents/openai.yaml、templates/styles.md），无 scripts；② 联网反查：全目录扫描 http/https/字体/CDN 关键字——命中的都是\"禁止使用/不要联网加载\"类条款与本地校验命令，无真实外发调用（符合\"端點仅见于禁止条款→green 的同类判断\"，但因有本地写盘故整体落 🔵）；③ 合规条款核对：禁用清单（<style>/class/id/伪元素/JS/外链/hover/fixed）与静态检查 9 条逐条比对，两者一致；④ 与样式库交叉核对：styles.md 头部自述为 /dbs-wechat-html 的样式权威来源、15 个风格小节编号 01–15 与 SKILL.md 的风格表逐一对齐；⑤ 输出面对照：SKILL.md 规定写盘路径/文件名/总览页，均属用户目录内本地产物，无外发；⑥ 分级依据：目录内零脚本零网络零凭证 + 必然本地写盘 → 🔵。",
    "second_pass": [
      {
        "item": "目录仅 3 个文件、无脚本可执行",
        "status": "ok",
        "detail": "find skills/dbs-wechat-html -type f 返回 SKILL.md、agents/openai.yaml、templates/styles.md。"
      },
      {
        "item": "无网络外发（不加载外部字体/CSS/图片/脚本）",
        "status": "ok",
        "detail": "全文 URL/字体/CDN 相关命中均为禁止条款与本地校验示例；无 fetch/curl/http 请求指令。"
      },
      {
        "item": "15 个风格 id 与样式库条目一一对应",
        "status": "ok",
        "detail": "SKILL.md 风格表 15 项与 styles.md 的「01 minimal … 15 event」15 个小节完全对齐。"
      },
      {
        "item": "粘贴兼容性规则与实际检查项一致",
        "status": "ok",
        "detail": "\"禁止 <style>/class/id/伪元素/JS/外链\"与静态检查 1–3 条、rg 扫描表达式互相覆盖。"
      },
      {
        "item": "\"执行前必须读取 templates/styles.md\"确有对应资产",
        "status": "ok",
        "detail": "样式库文件存在（197 行），开头自述为样式权威来源。"
      },
      {
        "item": "无凭证读取 / 无远程调用",
        "status": "ok",
        "detail": "全文无 env/API_KEY/token/keychain 类指令，也无任何外部服务调用。"
      },
      {
        "item": "写盘范围是否被夸大或漏记",
        "status": "ok",
        "detail": "SKILL.md 明确输出目录、文件名规则与总览页/风格目录三处产物，已如实记入 file_writes（含用户直接贴 Markdown 时改用当前工作目录）。"
      },
      {
        "item": "\"不复制品牌资产\"的边界声明",
        "status": "ok",
        "detail": "注意事项原文存在；属设计纪律，已在 traits/risks 中如实标注为\"范式相似仍可能联想\"。"
      },
      {
        "item": "模型生成的 HTML 是否可能包含未转义脚本",
        "status": "unlocatable",
        "detail": "转义由模型按指令执行（\"HTML 特殊字符必须转义\"），无脚本兜底；具体输出是否安全取决于单次生成，无法在源码内定位结论——故列为不可完全定位项。"
      }
    ],
    "level": 1,
    "level_label": "V1 已固定",
    "commit": "8b8e33f1ecaed8cee606fe950c4426b525ead314",
    "sha256": "ab53f46d3e3f4706d1214b8ad6b7181fae6328ba2ab99c2a31058c4047af7757",
    "reviewed_by": null,
    "reviewed_at": null
  },
  "assessed_at": "2026-10-25",
  "method_version": "2.0",
  "mirror": {
    "archive": "https://skillpub.pages.dev/r2/v/2026-09-15/dbs-wechat-html.tar.gz",
    "sha256": "ab53f46d3e3f4706d1214b8ad6b7181fae6328ba2ab99c2a31058c4047af7757",
    "commit": "8b8e33f1ecaed8cee606fe950c4426b525ead314"
  },
  "original": {
    "github": "https://github.com/dontbesilent2025/dbskill/tree/main/skills/dbs-wechat-html",
    "path": "skills/dbs-wechat-html",
    "commit": "8b8e33f1ecaed8cee606fe950c4426b525ead314"
  }
}