{
  "$schema": "https://bestaiskill.com/schemas/agent-install/2.json",
  "skill": "ljg-blind",
  "built": "2026-10-26",
  "control_level": 4,
  "control_level_label": "L4 高权限",
  "capabilities": [
    "execute_command",
    "network",
    "write_file"
  ],
  "required_controls": {
    "agent": [
      "sandbox_recommended",
      "graded_authorization"
    ],
    "admin": [
      "approval_process",
      "rollback_support",
      "full_audit"
    ]
  },
  "evidence": [
    {
      "file": "scripts/",
      "summary": "Local script/command execution: bun Tools/WeReadWebUrl.ts (local md5 encoding for bookId/chapterUid)"
    },
    {
      "file": "网络端点",
      "summary": "External network access declared: https://i.weread.qq.com/api/agent/gateway (/store/search for searching books, /book/chapterinfo)"
    },
    {
      "file": "本地工作目录",
      "summary": "File I/O and artifact output: ~/Context/{timestamp}--盲区-{theme}__blind.org"
    }
  ],
  "verification": {
    "method": "第一遍只读遍历 skills/ljg-blind 三个文件（SKILL.md、Tools/WeReadWebUrl.help.md、Tools/WeReadWebUrl.ts）与风险扫描结果，逐条记录流程、外部调用与安全面。第二遍不沿用第一遍结论，重读『操作步骤』各步命令、『盲区是什么』与 Gotchas，核对每条主张与引用是否逐字可定位，并逐条反查是否有漏计的网络调用、凭证读取或写盘。",
    "second_pass": [
      {
        "item": "外部调用核验：微信读书 Gateway",
        "status": "ok",
        "detail": "SKILL.md 第四步用 curl 调 /store/search 与 /book/chapterinfo，端点固定为 i.weread.qq.com，与风险扫描 URL 命中一致。"
      },
      {
        "item": "凭证读取核验",
        "status": "ok",
        "detail": "命令头 `-H \"Authorization: Bearer $WEREAD_API_KEY\"` 与『WEREAD_API_KEY 在环境变量里』说明一致，属读 env。"
      },
      {
        "item": "写盘核验",
        "status": "ok",
        "detail": "目标笔记写入 ~/Context/*.org，会话摘录写 /tmp/ljg-blind-*.txt，与写盘扫描线索吻合。"
      },
      {
        "item": "脚本行为反例检查",
        "status": "ok",
        "detail": "WeReadWebUrl.ts 只 import bun 的 CryptoHasher 做 md5，无网络、无文件读写、无 child_process；故 scripts_executed 只列该本地工具。"
      },
      {
        "item": "判级口径复核",
        "status": "ok",
        "detail": "按六档，读 WEREAD_API_KEY 且外发素材到固定端点落 orange；工具本地编码、非任意代码执行，未升级为 red。"
      },
      {
        "item": "引用可定位性",
        "status": "ok",
        "detail": "所有 quote 均可在 SKILL.md／WeReadWebUrl.help.md 原文逐字匹配，长度均大于 12 字符。"
      },
      {
        "item": "流程诚实性核对",
        "status": "ok",
        "detail": "『数据稀薄兜底』与『宁可交白卷，不许编』确认分析未把无证据时的强制造盲区当作能力。"
      }
    ],
    "level": 1,
    "level_label": "V1 已固定",
    "commit": "9e75497a950d2cc58ab9e6871f76405144687bd9",
    "sha256": "ed90cc51ffaa41407e4ebd6c207e0dc8f9ec1c314afaa3bc3c336eebea8c72bb",
    "reviewed_by": null,
    "reviewed_at": null
  },
  "assessed_at": "2026-10-25",
  "method_version": "2.0",
  "mirror": {
    "archive": "https://skillpub.pages.dev/r2/v/2026-10-10/ljg-blind.tar.gz",
    "sha256": "ed90cc51ffaa41407e4ebd6c207e0dc8f9ec1c314afaa3bc3c336eebea8c72bb",
    "commit": "9e75497a950d2cc58ab9e6871f76405144687bd9"
  },
  "original": {
    "github": "https://github.com/lijigang/ljg-skills/tree/main/skills/ljg-blind",
    "path": "skills/ljg-blind",
    "commit": "9e75497a950d2cc58ab9e6871f76405144687bd9"
  }
}