{
  "$schema": "https://bestaiskill.com/schemas/agent-install/2.json",
  "skill": "ljg-qa",
  "built": "2026-10-26",
  "control_level": 2,
  "control_level_label": "L2 本地",
  "capabilities": [
    "write_file"
  ],
  "required_controls": {
    "agent": [
      "restrict_working_directory"
    ],
    "admin": [
      "keep_operation_logs"
    ]
  },
  "evidence": [
    {
      "file": "本地工作目录",
      "summary": "File I/O and artifact output: Written by the agent according to the output contract into ~/Documents/notes/{YYYYMMDDTHHMMSS}--qa-{主题}__qa.org (org-mo"
    }
  ],
  "verification": {
    "method": "第二遍独立重读 + 反查（换角度抓第一遍的错）：① 全量文件清单核对（本 skill 目录 3 个文件，全为 Markdown，无隐藏文件、无二进制）；② token 扫描（fetch(/XMLHttpRequest/curl/child_process/process.env/API_KEY|TOKEN|SECRET/.env）——命中仅 curl 本地通知，其余零；③ 端点复核：目录内 URL 只有 http://localhost:31337/notify 与示例站 https://example.com/article，无外部服务域；④ 逐条把 how_it_works/capabilities 的引用回源核对拼写与上下文；⑤ 档位复核（只判 skill 自身目录：无脚本/无凭证/无外部外发、写盘与 curl 为宿主动作 → green）；⑥ meta 直采：§0 未给 stars/last_push，installs 无 per-skill 可定位值，均保持 null。",
    "second_pass": [
      {
        "item": "实现原理＝纯 prompt 编排，无自带可执行代码",
        "status": "ok",
        "detail": "全目录 3 个文件均为 Markdown（SKILL.md / References/QuestionDesign.md / Workflows/Extract.md）；扫描到的『执行外部程序』只有 SKILL.md 与 Extract.md 各一段 curl 本地通知，无其他脚本。"
      },
      {
        "item": "Voice Notification 的 curl 调用真实存在且指向本地回环",
        "status": "ok",
        "detail": "SKILL.md 与 Workflows/Extract.md 各有一段完全相同的 curl -s -X POST http://localhost:31337/notify 命令块，端点仅 localhost，不含任何外部域。"
      },
      {
        "item": "输出路径与命名在 SKILL.md 与 Extract.md 间一致",
        "status": "ok",
        "detail": "两处都写 ~/Documents/notes/ 与 {YYYYMMDDTHHMMSS}--qa-{主题}__qa.org，denote 前缀 qa- 与后缀 __qa 一致，无冲突。"
      },
      {
        "item": "「5-10 个 Q」数量纪律前后一致",
        "status": "ok",
        "detail": "SKILL.md 未给数量；QuestionDesign.md「数量节制」与 Extract.md Step 3 均为 5-10 个 Q、7±2 最舒服，彼此不冲突。"
      },
      {
        "item": "形式化禁 LaTeX、禁 Unicode 绘图的约束可执行",
        "status": "ok",
        "detail": "QuestionDesign.md 明列允许符号 = ≠ → ← + - × ÷ < > ⊃ ⊂ ⊥ ∧ ∨，禁 LaTeX 与复杂运算式，并给等式/对比/流向/递进四模式与『单独抽出来能否看懂』的检验句，可判定。"
      },
      {
        "item": "风险扫描把正文示例词 token 误报为凭据命中",
        "status": "discrepancy",
        "detail": "§3「憑證/環境變數」5 条命中全部是正文里的『token 经济性』『数据 → token → 答案』等示例词，无任何环境变量或密钥读取；扫描为线索非结论，故 credential_reads 保持空。"
      },
      {
        "item": "meta 直采项（stars/installs）无可定位 per-skill 值",
        "status": "ok",
        "detail": "§0 未给 stars/last_push；安装量只有仓库级聚合，按契约 meta.stars / last_push / installs 保持 null。"
      }
    ],
    "level": 1,
    "level_label": "V1 已固定",
    "commit": "9e75497a950d2cc58ab9e6871f76405144687bd9",
    "sha256": "1b797a9697841e5879d87abc0ce38d013cba0335e7fa80ef7d75a0f1382ac434",
    "reviewed_by": null,
    "reviewed_at": null
  },
  "assessed_at": "2026-10-25",
  "method_version": "2.0",
  "mirror": {
    "archive": "https://skillpub.pages.dev/r2/v/2026-10-10/ljg-qa.tar.gz",
    "sha256": "1b797a9697841e5879d87abc0ce38d013cba0335e7fa80ef7d75a0f1382ac434",
    "commit": "9e75497a950d2cc58ab9e6871f76405144687bd9"
  },
  "original": {
    "github": "https://github.com/lijigang/ljg-skills/tree/main/skills/ljg-qa",
    "path": "skills/ljg-qa",
    "commit": "9e75497a950d2cc58ab9e6871f76405144687bd9"
  }
}