{
  "$schema": "https://bestaiskill.com/schemas/agent-install/2.json",
  "skill": "social-reddit-card",
  "built": "2026-10-26",
  "control_level": 3,
  "control_level_label": "L3 联网",
  "capabilities": [
    "network"
  ],
  "required_controls": {
    "agent": [
      "declare_domain_and_key_scope"
    ],
    "admin": [
      "least_privilege_keys",
      "keep_request_logs"
    ]
  },
  "evidence": [
    {
      "file": "网络端点",
      "summary": "Declared external network access: cdn.tailwindcss.com (<script src> in example.html, requested by the browser during selector preview or local viewing)"
    }
  ],
  "verification": {
    "method": "第二遍独立重读 + 反查（换角度抓第一遍的错）：① glob 该模板目录全量文件（含隐藏文件）核对资产面；② 在 SKILL.md / example.* 上做 token 扫描（URL / curl / wget / fetch / exec / spawn / process.env / API_KEY / token / secret / \\.env / write / save / append / delete），逐个记录命中位置，用于判定「无脚本、无凭证、无写盘、无运行时外发」；③ 回到仓库源码核对运行时链路（loader.ts 读 frontmatter → shared.ts assemblePrompt → app/api/convert/route.ts spawn CLI → [id]/preview/route.ts 吐 example.html），确认模板不参与执行；④ git HEAD 与 GitHub API 核对 commit / license / stars / pushed_at；⑤ 用 README 与 loader.ts 的字段表交叉核对 frontmatter 语义，并逐个比对 example.html 与正文规格是否一致（本模板的差异项见 second_pass）。",
    "second_pass": [
      {
        "item": "skill 目录的脚本 / 网络 / 凭证 / 写盘面",
        "status": "ok",
        "detail": "目录仅 SKILL.md / example.html / example.md 3 个文件，无 scripts/references/数据目录；token 扫描（curl / wget / fetch / exec / spawn / process.env / API_KEY / token / secret / write / save / delete）在该目录的 SKILL.md 中零命中；无自带可执行脚本。"
      },
      {
        "item": "运行时链路复核",
        "status": "ok",
        "detail": "重读 loader.ts / shared.ts / app/api/convert/route.ts / app/api/templates/[id]/preview/route.ts：模板正文只作为 prompt body 被 assemblePrompt 拼装，宿主 spawn 本地 CLI 并捕获 stdout；模板不参与任何执行。"
      },
      {
        "item": "commit 与元数据",
        "status": "ok",
        "detail": "工作副本 git HEAD = 553ed98c283f9c0f489902d035416a972d6a9699（＝任务表 pin 的 full 40 位）；GitHub API nexu-io/html-anything：stars 8827、license spdx Apache-2.0、pushed_at 2026-09-15T03:36:24Z（与本地 HEAD 提交时间 2026-09-15 11:36:24 +0800 一致）。"
      },
      {
        "item": "README 与源码的 frontmatter schema 漂移（仓库级）",
        "status": "discrepancy",
        "detail": "README 第 213 / 217 / 468 行称模板 frontmatter 必须含 mode · scenario · surface · preview · design_system；但在 next/src/lib/templates/skills/ 下 '^mode:'、'^surface:'、'^design_system:' 全部零命中，实际字段是 category / scenario / aspect_hint / featured / recommended + example_*（loader.ts 的 SkillFrontmatter）。文档滞后于代码，不影响本模板运行，但照 README 新写模板会踩空。"
      },
      {
        "item": "frontmatter 元数据映射",
        "status": "ok",
        "detail": "loader.ts fmToMeta 逐字段映射 zhName / enName / emoji / description / category / scenario / aspectHint / tags + featured / recommended + example 卡；本模板取自 SKILL.md 的实际取值与之相符。"
      },
      {
        "item": "example.html 与 SKILL.md 的一致性",
        "status": "ok",
        "detail": "vote rail 三色、r/subreddit 元数据行、评论数 action row 均在示例实现（#ff4500 票数 12.3k / r/programming / 1.2k Comments）；配色与正文 dark 模式给定值一致。"
      },
      {
        "item": "「严禁外链图片」自证",
        "status": "ok",
        "detail": "example.html 除 Tailwind 与 Google Fonts 两个资源端点外没有任何图片 URL；票数、图标全为文本 + 内联 SVG，符合正文禁止条款。"
      },
      {
        "item": "端点扫描（目录内）",
        "status": "ok",
        "detail": "3 处：cdn.tailwindcss.com 与 fonts.googleapis.com 在 example.html，hyperframes.heygen.com 仅在 frontmatter 出处标注；SKILL.md 正文与 example.md 无其它 URL。"
      }
    ],
    "level": 1,
    "level_label": "V1 已固定",
    "commit": "553ed98c283f9c0f489902d035416a972d6a9699",
    "sha256": "13bf26ccd190a3b67c376a46ce3849ae5ad5fc0a2f751cdc7e21821c70518c3a",
    "reviewed_by": null,
    "reviewed_at": null
  },
  "assessed_at": "2026-10-25",
  "method_version": "2.0",
  "mirror": {
    "archive": "https://skillpub.pages.dev/r2/v/2026-09-15/social-reddit-card.tar.gz",
    "sha256": "13bf26ccd190a3b67c376a46ce3849ae5ad5fc0a2f751cdc7e21821c70518c3a",
    "commit": "553ed98c283f9c0f489902d035416a972d6a9699"
  },
  "original": {
    "github": "https://github.com/nexu-io/html-anything/tree/main/next/src/lib/templates/skills/social-reddit-card",
    "path": "next/src/lib/templates/skills/social-reddit-card",
    "commit": "553ed98c283f9c0f489902d035416a972d6a9699"
  }
}