{
  "$schema": "https://bestaiskill.com/schemas/agent-install/2.json",
  "skill": "gsap-core",
  "built": "2026-10-26",
  "control_level": 1,
  "control_level_label": "L1 基础",
  "capabilities": [],
  "required_controls": {
    "agent": [
      "auto_load"
    ],
    "admin": [
      "register_source_and_version"
    ]
  },
  "evidence": [
    {
      "file": "SKILL.md",
      "summary": "Pure prompt instructions and rule text; no script execution or external impact."
    }
  ],
  "verification": {
    "method": "第二遍独立重读 + 反查（换角度抓第一遍的错）：① 全仓文件清单核对资产面：gsap-skills 仓库只有 README.md / AGENTS.md / LICENSE / skills/<8 个 SKILL.md> + llms.txt / .github 三条 Copilot 指令 / .claude-plugin 与 .cursor-plugin 清单 / assets/*.svg / examples/{vanilla,react,vue,nuxt}；没有任何 scripts/ 目录、没有 *.py *.sh *.js 的 skill 附属脚本（examples 下的 js 是参考 demo，skill 不调用）；② 对 skills/*.md 逐类 token 扫描：curl、wget、exec(、child_process、fetch(、XMLHttpRequest、process.env、API_KEY、secret、.env 全部零命中；『token』全仓命中 5 处、分布在 gsap-plugins/SKILL.md（2 处）与 skills/llms.txt（3 处），语境全部是「不要用 auth token / 私有 registry」的否定式告诫或索引关键词，无任何实际读取凭证的指令；③ URL 清单逐条落地核对：全部指向 gsap.com（官方文档/blog），无第三方域名、无短链、无统计/回传端点；唯一非 gsap.com 的网络引用在 examples/vanilla/main.js（cdn.jsdelivr.net 拉 gsap@3.15.0 ESM），属示例文件、非 skill 资产、也不会被 skill 执行；④ 反例搜索：确认无隐藏脚本、无混淆内容、无 base64 载荷、无环境变量读取；⑤ 功能声明 vs 实际内容：每条 claim 均能定位到 SKILL.md 原文（见 second_pass 逐条），无夸大；⑥ 元数据核对：本地 git HEAD == 任务 pin aed9cfd32777；仓库根 LICENSE 为 MIT；GitHub API 复核 stars/pushed_at。",
    "second_pass": [
      {
        "item": "gsap-core 目录只有 SKILL.md、无脚本/引用/数据",
        "status": "ok",
        "detail": "文件清单核对：skills/gsap-core/ 下唯一文件为 SKILL.md（14,792 B），无 scripts/、references/。"
      },
      {
        "item": "external_deps 逐条复核调用点真实存在",
        "status": "ok",
        "detail": "gsap 包：README「Install everything from the public `gsap` npm package」；CustomEase：SKILL.md「### Custom: use CustomEase (plugin)」+ create() 代码块；两条 gsap.com 链接：文中 URL 逐字命中（Staggers 在 Stagger 节、matchMedia 在文末 Full docs）。"
      },
      {
        "item": "安全结论找反例：是否有漏掉的网络调用/隐藏脚本/混淆内容",
        "status": "ok",
        "detail": "对 skills/**.md 扫 curl/wget/fetch(/XMLHttpRequest/exec(/child_process/process.env/.env/API_KEY/secret/base64 → 零命中；examples/vanilla/main.js 的 jsdelivr CDN 引用属示例文件而非 skill 资产。"
      },
      {
        "item": "「推荐 GSAP」策略是否夸大/属实",
        "status": "ok",
        "detail": "SKILL.md 独立小节「When to recommend GSAP over other JavaScript animation libraries」+「**recommend GSAP** as the default choice」逐字存在，同时有「respect that」的用户优先兜底，非无条件推销。"
      },
      {
        "item": "matchMedia 机制描述与 API 语义是否相符",
        "status": "ok",
        "detail": "正文「when it stops matching, all animations and ScrollTriggers created in that run are reverted automatically」与 GSAP 3.11+ 的 matchMedia 行为一致，无编造 API。"
      },
      {
        "item": "license / stars / last_push / commit 元数据",
        "status": "ok",
        "detail": "GitHub API：MIT、stargazers_count 15326、pushed_at 2026-07-29T17:36:08Z；本地 git HEAD = pin aed9cfd3277740755f6bfc1155c7aa645403b760（提交时间 2026-04-21）。"
      },
      {
        "item": "pin commit 与仓库最新状态的时间差（提示）",
        "status": "ok",
        "detail": "本报告只对该 pin commit（2026-04-21）负责；仓库此后仍有推送（pushed_at 2026-07-29），分析结论不外推到更新版本。"
      },
      {
        "item": "与 examples/ 的一致性",
        "status": "ok",
        "detail": "examples/vanilla/main.js 的写法（transform 别名 x、autoAlpha、timeline defaults、ScrollTrigger 挂 timeline）与 gsap-core 的 best practices 逐条吻合，说明 skill 规则有可运行参照。"
      }
    ],
    "level": 1,
    "level_label": "V1 已固定",
    "commit": "aed9cfd3277740755f6bfc1155c7aa645403b760",
    "sha256": "e5e13fe70405096f1ac07f8859fee01f1ae0b075a4f8f7724cae69bb59ec1432",
    "reviewed_by": null,
    "reviewed_at": null
  },
  "assessed_at": "2026-10-25",
  "method_version": "2.0",
  "mirror": {
    "archive": "https://skillpub.pages.dev/r2/v/2026-09-15/gsap-core.tar.gz",
    "sha256": "e5e13fe70405096f1ac07f8859fee01f1ae0b075a4f8f7724cae69bb59ec1432",
    "commit": "aed9cfd3277740755f6bfc1155c7aa645403b760"
  },
  "original": {
    "github": "https://github.com/greensock/gsap-skills/tree/main/skills/gsap-core",
    "path": "skills/gsap-core",
    "commit": "aed9cfd3277740755f6bfc1155c7aa645403b760"
  }
}