{
  "$schema": "https://bestaiskill.com/schemas/agent-install/2.json",
  "skill": "qiaomu-codex-imagegen",
  "built": "2026-10-26",
  "control_level": 4,
  "control_level_label": "L4 高权限",
  "capabilities": [
    "execute_command",
    "network",
    "write_file"
  ],
  "required_controls": {
    "agent": [
      "sandbox_recommended",
      "graded_authorization"
    ],
    "admin": [
      "approval_process",
      "rollback_support",
      "full_audit"
    ]
  },
  "evidence": [
    {
      "file": "scripts/",
      "summary": "Executes local scripts or commands: node scripts/cli.mjs … (suggest|compose|generate|search|prompt|list, primary entry points)"
    },
    {
      "file": "网络端点",
      "summary": "Declares external network access: Zero HTTP request code within the skill directory (zero hits in network risk scanning)"
    },
    {
      "file": "本地工作目录",
      "summary": "File I/O and artifact output: Image output directory (defaults to ~/Pictures/qiaomu-codex-imagegen/<date>, or user-specified out_dir)"
    }
  ],
  "verification": {
    "method": "第二遍独立重读 bundle 全文（§0 核定值 → §1 88 项文件清单 → §2 逐字内文 → §3 风险扫描 → §4 判级口径）并换角度反查第一遍：① 按 §1 清单核对 §2 展开的 12 个文件中引用是否都指向真实存在的相对路径；② 把每条 claim 的 quote 回 §2 内文逐字比对（含标点、反引号、省略式拼法）；③ token 扫描复核（网络请求零命中、凭证类只命中 QIAOMU_CODEX_BIN/QIAOMU_CORPUS_DIR 与测试用 FAKE_CODEX_MODE、沙箱 4 条命中）；④ 判级复核，只判本 skill 目录并按 §4 六档口径自证橙档；⑤ meta 直采复核（commit 与 audit.skill_commit 一致，installs 无 per-skill 定位值故 null）。",
    "second_pass": [
      {
        "item": "架构陈述与文件清单一致：SKILL.md 说 relay 到 `codex app-server`，§1 有 scripts/lib/codex.mjs(11655B) 与 scripts/mcp-server.mjs(1550B) 支撑",
        "status": "ok",
        "detail": "§3 沙箱条目给出 scripts/lib/codex.mjs:81/87 的 approvalPolicy/ sandboxPolicy 原文，与 agents/interface.yaml:29 的 subprocess 声明互证，relay 说法成立。"
      },
      {
        "item": "「无网络请求」结论：风险扫描「網路請求」标注「無命中」，与 README 大量 https:// 文档链接不矛盾",
        "status": "ok",
        "detail": "URL 命中 26 条全部为文档/作者/上游链接（README、SKILL.md 版权行、manifest/package 的 homepage/repository），无执行期端点；出网只可能发生在 spawn 出的 codex 子进程。"
      },
      {
        "item": "凭证面：只读两个路径类环境变量，不接触任何 key",
        "status": "ok",
        "detail": "§3 凭证命中 23 条中与本 skill 相关的是 QIAOMU_CORPUS_DIR / QIAOMU_CODEX_BIN，其余为 mondo 文案里的 credentials 一词与测试用 FAKE_CODEX_MODE / QIAOMU_CORPUS_DIR；无 API_KEY/TOKEN/SECRET 类读取。"
      },
      {
        "item": "写盘面：29 条写盘命中集中在输出目录、sidecar、语言包与测试假图，未触及源文件",
        "status": "ok",
        "detail": "scripts/lib/tools.mjs:144 写 sidecar；scripts/lib/png.mjs:64 写压平 PNG；scripts/build-corpus.mjs 写 ~/.local/share/.../corpus；tests/fake-codex.mjs 写 tmpdir；符合「只写输出目录」的沙箱声明。"
      },
      {
        "item": "判级取样：与站内同类的 codex-image-to-eagle（orange）、ian-xiaohei-illustrations（orange）、baoyu-article-illustrator（orange）口径一致",
        "status": "ok",
        "detail": "同类「调用外部生图后端并消耗账号额度」均落橙；本 skill 无 red 特征（无逆向/冒充/绕过/任意执行），也无 blue 的可能（自身脚本会触发外部生成）。"
      },
      {
        "item": "第三方语料授权风险已被作者显式隔离，不构成 red",
        "status": "ok",
        "detail": "README 明写 689 条语料「没有看到开放授权，所以只做成你本机的数据包，不随仓库分发」，SKILL.md 亦禁止原样转手；仅记为 verdict.risks。"
      },
      {
        "item": "meta 核定值核对：license MIT、official_desc 逐字取自 SKILL.md frontmatter、commit 与 audit 一致",
        "status": "ok",
        "detail": "commit=c03a1ccaf77938257bb93f64e09afa9cd08efe29，与骨架 audit.skill_commit 相同；stars/last_push/installs 维持 null（无 per-skill 可定位值）。"
      }
    ],
    "level": 1,
    "level_label": "V1 已固定",
    "commit": "c03a1ccaf77938257bb93f64e09afa9cd08efe29",
    "sha256": "30d89f420fcbc925fc9a6fc28979ba81bb83585f914209235ca04a502534b44a",
    "reviewed_by": null,
    "reviewed_at": null
  },
  "assessed_at": "2026-10-25",
  "method_version": "2.0",
  "mirror": {
    "archive": "https://skillpub.pages.dev/r2/v/2026-10-10/qiaomu-codex-imagegen.tar.gz",
    "sha256": "30d89f420fcbc925fc9a6fc28979ba81bb83585f914209235ca04a502534b44a",
    "commit": "c03a1ccaf77938257bb93f64e09afa9cd08efe29"
  },
  "original": {
    "github": "https://github.com/joeseesun/qiaomu-codex-imagegen",
    "path": "",
    "commit": "c03a1ccaf77938257bb93f64e09afa9cd08efe29"
  }
}