{
  "$schema": "https://bestaiskill.com/schemas/agent-install/2.json",
  "skill": "make-a-video",
  "built": "2026-10-26",
  "control_level": 4,
  "control_level_label": "L4 高权限",
  "capabilities": [
    "execute_command",
    "network",
    "write_file"
  ],
  "required_controls": {
    "agent": [
      "sandbox_recommended",
      "graded_authorization"
    ],
    "admin": [
      "approval_process",
      "rollback_support",
      "full_audit"
    ]
  },
  "evidence": [
    {
      "file": "scripts/",
      "summary": "Execute local scripts or commands: 0 scripts inside the skill itself (contains SKILL.md + 6 reference files verified via find -type f)"
    },
    {
      "file": "网络端点",
      "summary": "Declare external network access: Runtime only: local loopback only — Studio preview http://localhost:3002 and playback test server http://localhost:8080; none"
    },
    {
      "file": "本地工作目录",
      "summary": "File read/write & artifact outputs: Project files under video-projects/<slug>/ (or user-specified directory): BRIEF.md, STORYBOARD.md, index.html, com"
    }
  ],
  "verification": {
    "method": "第二遍独立核对：① 目录清点（7 个文件：SKILL.md + 6 references，无脚本、无 assets）；② token 扫描（URL / fetch / http / curl / npx 命令 / process.env / API_KEY|TOKEN|SECRET）——命中的 URL 全是 localhost:3002/8080 与 fonts.googleapis.com，fetch( 命中位于『禁用渲染期 fetch』条款；③ 把 8 道门与非协商条款逐条回源（Gate 1 六项、Gate 4 审批硬门、Gate 7/8 两道预览门、SLOT 锚、video 不许加 class=clip、Math.random/Date.now 禁令、不许把 index.html 放工作区根）；④ 跨文件一致性：SKILL.md 引用的 6 个 references 均存在且各自自述服务哪道门；⑤ 检查是否误把 hyperframes transcribe/tts 记成云服务（文档未指定服务商，故只记 CLI 本身）；⑥ 复核『先盘点资产再提问』与『不强加品牌』这两条是否在多处一致。",
    "second_pass": [
      {
        "item": "目录文件清单与脚本面",
        "status": "ok",
        "detail": "find 返回 SKILL.md（12.6KB）+ references/{build-checklist,catalog-intent-map,composition-scaffold,interview-questions,storyboard-template,style-intake}.md；无 scripts/、无 .js/.mjs/.py，无隐藏文件。"
      },
      {
        "item": "URL/网络面归类",
        "status": "ok",
        "detail": "命中的 URL 三类：localhost:3002（Studio）、localhost:8080（试播）、fonts.googleapis.com（默认字体对，产物期）。无第三方 API 端点、无上传路径、无云服务名。"
      },
      {
        "item": "凭证面反例搜索",
        "status": "ok",
        "detail": "0 处 env/API_KEY/TOKEN/SECRET 命中；全文未要求账号、配额或密钥（与 edit-video 形成对照：那里把服务前置与成本纪律写进主流程）。"
      },
      {
        "item": "门禁与非协商条款回源",
        "status": "ok",
        "detail": "Gate 4 的 'WAIT for explicit approval.'、Gate 7 的 'Silence is not approval.'、Gate 8 的 Read-every-PNG、SLOT 锚、class=\"clip\" 禁令、Math.random/Date.now 禁令、'Never put index.html at the workspace root.' 均在源码定位到，无遗漏改写。"
      },
      {
        "item": "references 引用完整性",
        "status": "ok",
        "detail": "SKILL.md References 段列的 6 个文件全部存在于 references/ 目录，且每个文件开头自述所属 Gate（Gate 1-3 / Gate 5 / Gate 6 / Gates 7-8），引用链无死链。"
      },
      {
        "item": "CLI 能力是否被误记为云服务",
        "status": "ok",
        "detail": "文档只写 `npx hyperframes tts --help` 与 `npx hyperframes transcribe ...`，未指定服务商或密钥；故 external_deps 只记 CLI 本体，不虚增 API 条目。"
      }
    ],
    "level": 1,
    "level_label": "V1 已固定",
    "commit": "0d30152a82b9ceb93cfdd9bdbf46f0d5ab3cde86",
    "sha256": "d16534f6ceefd132dba7a25400a6144d4ca11292c733355f8edfe5d39fc41cc4",
    "reviewed_by": null,
    "reviewed_at": null
  },
  "assessed_at": "2026-10-25",
  "method_version": "2.0",
  "mirror": {
    "archive": "https://skillpub.pages.dev/r2/v/2026-09-28/make-a-video.tar.gz",
    "sha256": "d16534f6ceefd132dba7a25400a6144d4ca11292c733355f8edfe5d39fc41cc4",
    "commit": "0d30152a82b9ceb93cfdd9bdbf46f0d5ab3cde86"
  },
  "original": {
    "github": "https://github.com/nateherkai/hyperframes-student-kit/tree/main/.claude/skills/make-a-video",
    "path": ".claude/skills/make-a-video",
    "commit": "0d30152a82b9ceb93cfdd9bdbf46f0d5ab3cde86"
  }
}