{
  "$schema": "https://bestaiskill.com/schemas/agent-install/2.json",
  "skill": "frost-sequence-camera-orbit",
  "built": "2026-10-26",
  "control_level": 4,
  "control_level_label": "L4 高权限",
  "capabilities": [
    "execute_command",
    "network",
    "write_file"
  ],
  "required_controls": {
    "agent": [
      "sandbox_recommended",
      "graded_authorization"
    ],
    "admin": [
      "approval_process",
      "rollback_support",
      "full_audit"
    ]
  },
  "evidence": [
    {
      "file": "scripts/",
      "summary": "Execute local scripts or commands: assets/frost.js (loaded and executed via <script src> in composition: WebGPU/TSL ice sequence runtime, exposes window.Frost)"
    },
    {
      "file": "网络端点",
      "summary": "Declare external network access: Install time (executed by host CLI npx hyperframes add): static.heygen.ai/hyperframes-oss/regist"
    },
    {
      "file": "本地工作目录",
      "summary": "File I/O and artifact output: Runtime (composition): no disk writes; canvas and WebGPU resources are allocated in memory and released upon dispose."
    }
  ],
  "verification": {
    "method": "第二遍独立重读 + 反查（不看第一遍结论）：① 文件级清点并按 registry-item.json 的 files 清单求差集（发现 3 项 url 型资产盘上缺失）；② 端点与敏感关键词扫描（http(s)://、process.env|secret|token|api_key|cookie|sudo|sandbox）；③ 确定性扫描（Math.random / Date.now / requestAnimationFrame）与 WebGPU 门槛核对；④ 变量数三方对齐（frontmatter ↔ SKILL.md 变量表 ↔ html 声明）与 duration 一致性；⑤ 每条 evidence.quote 回源 pin 源文逐字校验（含 … 分段按序命中）。",
    "second_pass": [
      {
        "item": "变量数与声明一致性（frontmatter 自称 216 variables）",
        "status": "ok",
        "detail": "脚本实测：SKILL.md 变量表 216 行、html data-composition-variables 解析出 216 项、frontmatter 写 216 —— 一致（本批最大变量表）。"
      },
      {
        "item": "composition id 与目录名不一致",
        "status": "ok",
        "detail": "SKILL.md 挂载片段与 Runtime contract 都写 frost-sequence-rig，html data-composition-id 亦为 frost-sequence-rig；目录/条目名是 frost-sequence-camera-orbit。非缺陷，但挂载时不可按目录名猜 id。"
      },
      {
        "item": "source/README 声称与分发内容的差异",
        "status": "discrepancy",
        "detail": "README 说 build.mjs 会产出 ../assets/frost.js 与 ../assets/motion.js，但 registry-item.json 的分发清单只含 frost.js，盘上 assets/ 也没有 motion.js —— 安装后那份「轻量 WebGL 编辑辅助」并不随块提供。"
      },
      {
        "item": "localStorage 出现位置",
        "status": "ok",
        "detail": "仅见于 source/src/motion/editor.ts（getItem/setItem 包在 try/catch 里）；该模块的产物 motion.js 未随块分发（见上一条），因此不构成安装后的实际接触面。"
      },
      {
        "item": "装机期 CDN 资产声称",
        "status": "ok",
        "detail": "registry-item.json 中 shards-atlas.png 与 textures/ice-inclusions-generated.png 两项带 static.heygen.ai 的 url，盘上确实缺失，与 SKILL.md 的 fetched from the CDN at install 一致。"
      },
      {
        "item": "WebGPU 硬门槛与构建自检",
        "status": "ok",
        "detail": "src/frost.ts 中 navigator.gpu 缺失即 throw（并附 requestAdapter 的 null 分支）；source/README.md 描述的两道构建前自检对应 tools/compile-preflight.mjs 与 tools/run-shard-compile.mjs（后者 import node:child_process 的 spawnSync）。"
      },
      {
        "item": "凭证扫描",
        "status": "ok",
        "detail": "对 SKILL.md / html / registry-item.json / source/ 扫描 process.env、secret、token、api_key、cookie、sudo、sandbox：无真实命中（仅 curl noise 之类注释文字误配）。"
      }
    ],
    "level": 1,
    "level_label": "V1 已固定",
    "commit": "d2f0bc7f34837da54ae22063772d75d75ce26477",
    "sha256": "d873fafcf97f3f6b2133dc0f52c27986ce789a954187a8ac41acc38199d2b561",
    "reviewed_by": null,
    "reviewed_at": null
  },
  "assessed_at": "2026-10-25",
  "method_version": "2.0",
  "mirror": {
    "archive": "https://skillpub.pages.dev/r2/v/2026-09-28/frost-sequence-camera-orbit.tar.gz",
    "sha256": "d873fafcf97f3f6b2133dc0f52c27986ce789a954187a8ac41acc38199d2b561",
    "commit": "d2f0bc7f34837da54ae22063772d75d75ce26477"
  },
  "original": {
    "github": "https://github.com/heygen-com/hyperframes/tree/main/registry/blocks/frost-sequence-camera-orbit",
    "path": "registry/blocks/frost-sequence-camera-orbit",
    "commit": "d2f0bc7f34837da54ae22063772d75d75ce26477"
  }
}