{
  "$schema": "https://bestaiskill.com/schemas/agent-install/2.json",
  "skill": "volcengine-video-understanding",
  "built": "2026-10-26",
  "control_level": 4,
  "control_level_label": "L4 高权限",
  "capabilities": [
    "execute_command",
    "network",
    "write_file"
  ],
  "required_controls": {
    "agent": [
      "sandbox_recommended",
      "graded_authorization"
    ],
    "admin": [
      "approval_process",
      "rollback_support",
      "full_audit"
    ]
  },
  "evidence": [
    {
      "file": "scripts/",
      "summary": "Executes local script or command: python3 scripts/video_understand.py <video> \"<指令>\" [--model ...] [--fps N] "
    },
    {
      "file": "网络端点",
      "summary": "Declares external network access: POST https://ark.cn-beijing.volces.com/api/v3/files (multipart upload video, with prepro"
    },
    {
      "file": "本地工作目录",
      "summary": "File read/write and artifact output: JSON result file specified by --output (with open(args.output, 'w', encoding='utf-8'))"
    }
  ],
  "verification": {
    "method": "第一遍：通读 bundle 展開的 SKILL.md（前置要求、密钥配置、CLI 用法、参数、模型列表、调用流程、FPS 建议、限制、Python API、错误处理）与 video_understand.py 全文关键段。第二遍：独立逐条回 §2 原文核对 evidence.file/quote 与行为面（密钥读取、三处网络调用、写盘），并按判级范式复核 orange 判定。",
    "second_pass": [
      {
        "item": "读取 ARK_API_KEY 并外发",
        "status": "ok",
        "detail": "脚本 get_api_key() 用 require_env_key(\"ARK_API_KEY\")；三处请求均带 \"Authorization\": f\"Bearer {api_key}\"。"
      },
      {
        "item": "端点定位",
        "status": "ok",
        "detail": "BASE_URL = \"https://ark.cn-beijing.volces.com/api/v3\"；风险扫描『URL/端點』与『網路請求』命中 files/responses 与脚本 requests.post/get。"
      },
      {
        "item": "素材上传到外部服务",
        "status": "ok",
        "detail": "upload_video_file() 以 requests.post 到 {BASE_URL}/files 上传视频；analyze_video() 以 file_id 调 /responses。"
      },
      {
        "item": "无本地危险执行面",
        "status": "ok",
        "detail": "风险扫描『危險旗標/防護繞過』『沙箱/未受控執行』均无命中；脚本无 eval/exec、无 shell。"
      },
      {
        "item": "唯一写盘为 --output",
        "status": "ok",
        "detail": "风险扫描『寫盤/產生檔案』仅命中 open(args.output, 'w', encoding='utf-8')。"
      },
      {
        "item": "env_utils 为跨目录依赖",
        "status": "ok",
        "detail": "脚本 sys.path 插入 COMMON_DIR = Path(__file__).parent.parent.parent / \"common\"，导入 load_env/require_env_key；该模块位于 skill 目录之外，本报告仅作推测定位。"
      },
      {
        "item": "档位复核",
        "status": "ok",
        "detail": "读 env 密钥 + 用户视频出网至生成型服务 → orange；无 red 触发项。"
      },
      {
        "item": "元数据与 commit",
        "status": "ok",
        "detail": "commit=dd0bf355955b4c82b764740b4183c86a72ba0e0c，license=MIT（仓库根），installs=null。"
      }
    ],
    "level": 1,
    "level_label": "V1 已固定",
    "commit": "dd0bf355955b4c82b764740b4183c86a72ba0e0c",
    "sha256": "5f1ee27839a37239521b99380b25cb6243bcd090ef4a1ebc005fe1ae1e138b2c",
    "reviewed_by": null,
    "reviewed_at": null
  },
  "assessed_at": "2026-10-25",
  "method_version": "2.0",
  "mirror": {
    "archive": "https://skillpub.pages.dev/r2/v/2026-10-10/volcengine-video-understanding.tar.gz",
    "sha256": "5f1ee27839a37239521b99380b25cb6243bcd090ef4a1ebc005fe1ae1e138b2c",
    "commit": "dd0bf355955b4c82b764740b4183c86a72ba0e0c"
  },
  "original": {
    "github": "https://github.com/freestylefly/canghe-skills/tree/main/skills/canghe-volcengine-video-understanding",
    "path": "skills/canghe-volcengine-video-understanding",
    "commit": "dd0bf355955b4c82b764740b4183c86a72ba0e0c"
  }
}