{
  "$schema": "https://bestaiskill.com/schemas/agent-install/2.json",
  "skill": "skill-creator",
  "built": "2026-10-26",
  "control_level": 4,
  "control_level_label": "L4 高权限",
  "capabilities": [
    "execute_command",
    "write_file"
  ],
  "required_controls": {
    "agent": [
      "sandbox_recommended",
      "graded_authorization"
    ],
    "admin": [
      "approval_process",
      "rollback_support",
      "full_audit"
    ]
  },
  "evidence": [
    {
      "file": "scripts/",
      "summary": "Execute local script or command: scripts/init_skill.py"
    },
    {
      "file": "本地工作目录",
      "summary": "File read/write and artifact output: Create skill directory and SKILL.md"
    }
  ],
  "verification": {
    "method": "第二遍独立复核：对照 §1 的 7 个文件清单确认脚本用途；回 §2/§3 核对脚本执行、写盘、凭证三类结论；对 §3 两条「凭证」命中逐条回原文确认是文本而非读取；对照 §4 口径定档。",
    "second_pass": [
      {
        "item": "文件面核对",
        "status": "ok",
        "detail": "§1 共 7 个文件：SKILL.md、LICENSE.txt、2 个 references、3 个 scripts，与 internal_assets 一致。"
      },
      {
        "item": "脚本执行真伪",
        "status": "ok",
        "detail": "§3「执行外部程序」无命中（脚本由模型按 SKILL.md 指示调用）；三个脚本源码实读确认存在。"
      },
      {
        "item": "凭证读取反例",
        "status": "ok",
        "detail": "§3 两条凭证命中经回原文核对为 SKILL.md 的 'challenge each' 文本与示例 'token validation middleware'，非 env/凭据读取，故 credential_reads 判空。"
      },
      {
        "item": "写盘复核",
        "status": "ok",
        "detail": "§3 写盘 10 条命中 init_skill.py（mkdir/write_text/chmod）与 package_skill.py（mkdir/zipf.write），与 file_writes 一致。"
      },
      {
        "item": "网络与注入面",
        "status": "ok",
        "detail": "§3 无 URL、无网络请求命中；注入面仅剩用户输入经 yaml.safe_load 解析的语义校验缺口（设计边界）。"
      },
      {
        "item": "档位判定复核",
        "status": "ok",
        "detail": "本地脚本 + 本地读写、无网络无凭证 → 🔵 blue 成立。"
      }
    ],
    "level": 1,
    "level_label": "V1 已固定",
    "commit": "dd0bf355955b4c82b764740b4183c86a72ba0e0c",
    "sha256": "0b2639ac219971bd94199a977f4d055467500e73b57db56876648093f7e94639",
    "reviewed_by": null,
    "reviewed_at": null
  },
  "assessed_at": "2026-10-25",
  "method_version": "2.0",
  "mirror": {
    "archive": "https://skillpub.pages.dev/r2/v/2026-10-10/skill-creator.tar.gz",
    "sha256": "0b2639ac219971bd94199a977f4d055467500e73b57db56876648093f7e94639",
    "commit": "dd0bf355955b4c82b764740b4183c86a72ba0e0c"
  },
  "original": {
    "github": "https://github.com/freestylefly/canghe-skills/tree/main/skills/skill-creator",
    "path": "skills/skill-creator",
    "commit": "dd0bf355955b4c82b764740b4183c86a72ba0e0c"
  }
}