{
  "$schema": "https://bestaiskill.com/schemas/agent-install/2.json",
  "skill": "marketing-skills",
  "built": "2026-10-26",
  "control_level": 4,
  "control_level_label": "L4 高权限",
  "capabilities": [
    "execute_command",
    "network",
    "write_file"
  ],
  "required_controls": {
    "agent": [
      "sandbox_recommended",
      "graded_authorization"
    ],
    "admin": [
      "approval_process",
      "rollback_support",
      "full_audit"
    ]
  },
  "evidence": [
    {
      "file": "scripts/",
      "summary": "Local script or command execution: tools/clis/*.js (64 files): invoked on-demand by the agent or user via `node tools/clis/<name>.js <cmd> ...`"
    },
    {
      "file": "网络端点",
      "summary": "Declared external network access: 64 CLIs under tools/clis send HTTPS requests to vendor APIs (GA4, Resend, Dub, Meta/Google/LinkedIn, etc.)"
    },
    {
      "file": "本地工作目录",
      "summary": "File I/O and artifact output: Core skills instruct writing to user project files, notably .agents/product-marketing.md (the primary output of product-marketing, containing versioning and context)"
    }
  ],
  "verification": {
    "method": "第二遍独立重读 + 反查：① git ls-tree/文件清点核对结构（50 个 SKILL.md、50 个 evals.json、178 个 references、0 个 skill 内脚本、64 个 CLI、95 份 integrations）；② 对 tools/clis 做覆盖统计（process.env / await fetch / dry-run 三项 grep -l 均 = 64），把『每个 CLI 都读凭证且都有 dry-run』从抽样提升为全量结论；③ 逐条读关键治理与纪律文件原文（AGENTS.md 全文、tools/clis/README.md 的 Authentication 表、tools/PARTNERS.md 首段、scripts/sync-partners.mjs 头部、validate-skills.sh 头部与尾部、validate-skills-official.sh 的安装段、README 的 Partners 与 Skills 区块）；④ 读两个 workflow（validate-skill.yml 全文、sync-skills.yml 头部）确认 CI 真实动作与第三方 Action 版本；⑤ 功能声明 vs 实际能力：README 宣称『works with any agent that supports the Agent Skills spec』与『50 marketing skills』均有实证（50 个 SKILL.md；纯 Markdown + frontmatter 符合规范），无夸大；⑥ 许可/元数据：gh api 复核 stars=50403、pushed_at=2026-09-05T04:48:10Z、license MIT；本地 git HEAD = 5b2c0007766c6a1cf1d53fc8fc73e979e0821022 == pin 5b2c0007766c；⑦ 所有引用的 quote 均经脚本逐条 `in file.read()` 精确匹配通过（本 JSON 内每条 evidence.quote 都可 grep -F 命中）。",
    "second_pass": [
      {
        "item": "skill.path 定位（任务表标『待定位』）；合集条目指向哪个具体 skill",
        "status": "ok",
        "detail": "本条目展示名『Marketing Skills』对应的是 50 个 skill 的合集，仓库根无集合级 SKILL.md。skill.path 现指向 skills/product-marketing —— README 明写它是地基（'The `product-marketing` skill is the foundation — every other skill checks it first'），它产出全部其它 skill 共用的 .agents/product-marketing.md，因此最能代表这个集合的整体形态。其余 49 个 skill 并列于 skills/<name>/（cro、copywriting、seo-audit、ads、analytics、referrals、revops 等）；本 JSON 的 capabilities/traits 按合集口径书写，evidence 分别指向 skills/ 下与 tools/ 下的具体文件。"
      },
      {
        "item": "official_desc 取哪一份（合集无集合级 frontmatter description）",
        "status": "discrepancy",
        "detail": "合集在仓库根没有集合级 SKILL.md/frontmatter description（50 个 skill 各有自己的 description 与 metadata.version）。本条目 official_desc 采用代表 skill skills/product-marketing 的 frontmatter description 逐字原文（与 skill.path 指向的具体 skill 一致，满足『official_desc = SKILL.md frontmatter 原文』的取证规则）；集合级口径（plugin.json 的 'Marketing skills for AI agents — conversion optimization, copywriting, SEO, paid ads, ad creative, and growth' 与 marketplace.json 的 50-skill 长描述）已逐字记入 internal_assets 的清单条目说明，不丢失信息。"
      },
      {
        "item": "『核心 skill 无脚本』结论的反例搜索",
        "status": "ok",
        "detail": "find skills -name '*.py' -o -name '*.sh' -o -name '*.js' 零命中；skills/ 下可执行资产为 0，全部内容为 .md 与 evals.json。所有可执行代码集中在 tools/clis（64）、scripts/（sync-partners.mjs）与两个根级 validate-skills*.sh。"
      },
      {
        "item": "『每个 CLI 都读凭证 + 都有 dry-run』是否全量成立",
        "status": "ok",
        "detail": "grep -l 'process.env' tools/clis/*.js = 64；grep -l 'await fetch' = 64；grep -l 'dry-run' = 64。抽样读 ga4.js（三端点 + dry-run 打码 Authorization）、resend.js（api.resend.com）、dub.js（api.dub.co）确认模式一致，非个别实现。"
      },
      {
        "item": "赞助是否会污染推荐（治理是否只是口号）",
        "status": "ok",
        "detail": "PARTNERS.md 首条原则逐字 'Sponsorship funds the work, never the recommendations.'；README 与 REGISTRY 的伙伴区块由 partners.json 经 sync-partners.mjs 生成且带 ◆ 披露标记；REGISTRY 明写伙伴『listed alongside the neutral options for the same job, never instead of them』。属可核查的机制而非纯声明（生成脚本 + 标记区块 + --check）。"
      },
      {
        "item": "更新检查的真实动作",
        "status": "ok",
        "detail": "AGENTS.md 'Checking for Updates' 小节逐字给出 raw.githubusercontent 上的 VERSIONS.md 抓取，并要求『Once per session, on first skill use』且仅在 ≥2 skill 有更新或主版本跳变时以非阻塞方式提示；属指示 agent 去抓取，而非仓库自带定时任务。"
      },
      {
        "item": "CI 与本地校验的真实命令",
        "status": "ok",
        "detail": "validate-skill.yml 用 matrix + Flash-Brew-Digital/validate-skill@v1 按改动的 SKILL.md 逐个校验；sync-skills.yml 跑 node .github/scripts/sync-skills.js 并自动提交三处清单；validate-skills.sh 为自研 shell 检查（exit 1 on issues）；validate-skills-official.sh 会 git clone github.com/agentskills/agentskills 到 /tmp 并 uv sync / pip install -e，属维护者手动运行的网络+远程包路径。"
      },
      {
        "item": "stars / last_push 两源比对",
        "status": "ok",
        "detail": "gh api 实时 stars=50403、pushed_at=2026-09-05T04:48:10Z；queue-100.json 快照为 50403 / 2026-09-05，一致。"
      },
      {
        "item": "无法定位/未穷举项",
        "status": "unlocatable",
        "detail": "① 50 个 SKILL.md 与 178 个 references 未逐字读完（按侦查预算抽样：cro、product-marketing 全文读 + 其余按目录与文件名清单核对），因此 capabilities 只列到族级而非逐个 skill 描述；② 95 份 integrations 指南未逐份读（仅确认清单与 REGISTRY 索引结构）；③ 未运行任何 CLI（不跑构建/测试约束，且会真实外发），故『CLI 实际请求行为』仅有源码级证据；④ 仓库无安装量数据（installs 留 null）。"
      }
    ],
    "level": 1,
    "level_label": "V1 已固定",
    "commit": "5b2c0007766c6a1cf1d53fc8fc73e979e0821022",
    "sha256": "27377979bea86ebe876b44f02b4b43d2a0bde0768e14dd16129cc47791404e53",
    "reviewed_by": null,
    "reviewed_at": null
  },
  "assessed_at": "2026-10-25",
  "method_version": "2.0",
  "mirror": {
    "archive": "https://skillpub.pages.dev/r2/v/2026-09-15/marketing-skills.tar.gz",
    "sha256": "27377979bea86ebe876b44f02b4b43d2a0bde0768e14dd16129cc47791404e53",
    "commit": "5b2c0007766c6a1cf1d53fc8fc73e979e0821022"
  },
  "original": {
    "github": "https://github.com/coreyhaines31/marketingskills/tree/main/skills/product-marketing",
    "path": "skills/product-marketing",
    "commit": "5b2c0007766c6a1cf1d53fc8fc73e979e0821022"
  }
}