{
  "$schema": "https://bestaiskill.com/schemas/agent-install/2.json",
  "skill": "vsc",
  "built": "2026-10-26",
  "control_level": 4,
  "control_level_label": "L4 高权限",
  "capabilities": [
    "execute_command"
  ],
  "required_controls": {
    "agent": [
      "sandbox_recommended",
      "graded_authorization"
    ],
    "admin": [
      "approval_process",
      "rollback_support",
      "full_audit"
    ]
  },
  "evidence": [
    {
      "file": "scripts/",
      "summary": "Execute local scripts or commands: python3 \"<vsc skill directory>/scripts/discover_skills.py\" (the only script specified by SKILL.md; uses standard library only, read-only on filesystem)"
    }
  ],
  "verification": {
    "method": "第二遍独立重读 + 反查：① 通读 discover_skills.py 全部 109 行，逐项核对 default_roots/load_catalog/discover/main 的行为与 SKILL.md 描述是否一致；② 用 python 实读 catalog.json 清点成员数与字段，确认 vsc 自身不在册、7 个叶子技能在册；③ 交叉核对 tools/build_vsc_catalog.py 的排除逻辑（path.parent.name == \"vsc\"）与 SKILL.md/README 的『vsc 不登记自身』说法；④ 对照 tests/test_vsc_catalog.py 与 tests/vsc-routing-cases.md，确认目录完整性有单测、路由行为有验收用例（并注意用例明示『不能由目录单元测试代替』）；⑤ 全仓 token 扫描确认 vsc 目录无网络/写盘/子进程调用；⑥ 夸大检查：『它不负责语义评分，也不会加载全部技能正文或执行创作』与代码相符（脚本只读 frontmatter 的 name 行做正则）。",
    "second_pass": [
      {
        "item": "脚本行为 vs SKILL.md 描述的一致性",
        "status": "ok",
        "detail": "四态判定 available/missing/invalid/conflict 与 needs_review 在 discover() 中逐一可实现：found 空则 missing、errors 非空则 invalid、哈希多于一个则 conflict、否则 available 并比对 sha256。"
      },
      {
        "item": "catalog.json 成员面与「vsc 不入册」验证",
        "status": "ok",
        "detail": "实读 catalog.json：schema_version=1，skills 数组含 7 个叶子技能（character-candid-photography / codex-image-to-eagle / rare-style-explorer / shan-ze-school / summer-boyfriend-pov / vibeshot-candid-photography / virtual-couple-travel-vlog），无 vsc；load_catalog() 亦显式拒绝 name == \"vsc\"。"
      },
      {
        "item": "搜索范围是否真如文档所述（不递归全盘）",
        "status": "ok",
        "detail": "default_roots() 只加入入口同级目录、最近项目的 .agents/.codex/.claude 下 skills、~/.agents/skills、CODEX_HOME/skills、~/.claude/skills；无 os.walk/rglob 全盘扫描。"
      },
      {
        "item": "外部依赖条目反查",
        "status": "ok",
        "detail": "脚本 import 仅标准库；无 requirements、无网络库；README 亦说明『运行技能发现脚本需要 Python 3.10+，无需额外 Python 包』。"
      },
      {
        "item": "安全结论反例搜索（写盘/子进程/网络）",
        "status": "ok",
        "detail": "该目录 4 个文件逐 token 扫描：无 open(...,'w')/write_text/mkdir、无 subprocess/os.system、无 socket/urllib/requests；唯一 env 读取是 CODEX_HOME。"
      },
      {
        "item": "路由边界说法与其他技能是否闭环",
        "status": "ok",
        "detail": "vsc/SKILL.md 的路由示例（泳池边喝咖啡走生活抓拍、角色 COS n=10 走角色抓拍、泳装朋友视角单图走夏季 POV）与三个被指向技能各自的 vsc-distinction 描述一致，双向闭环。"
      },
      {
        "item": "『不联网安装技能』承诺是否与仓库其它脚本冲突",
        "status": "ok",
        "detail": "vsc 目录内无安装类代码；tools/build_vsc_catalog.py 是维护者工具（需 PyYAML），README 明确『维护工具需要 PyYAML，用户运行入口不需要安装它』，不构成入口运行期依赖。"
      }
    ],
    "level": 1,
    "level_label": "V1 已固定",
    "commit": "fcee81beb62a0907b206e62b269195dbd9aac4c3",
    "sha256": "b9f7fae71ecb9783717880a372a9ade266a5ecf73ec3d717f33604a070365d59",
    "reviewed_by": null,
    "reviewed_at": null
  },
  "assessed_at": "2026-10-25",
  "method_version": "2.0",
  "mirror": {
    "archive": "https://skillpub.pages.dev/r2/v/2026-09-15/vsc.tar.gz",
    "sha256": "b9f7fae71ecb9783717880a372a9ade266a5ecf73ec3d717f33604a070365d59",
    "commit": "fcee81beb62a0907b206e62b269195dbd9aac4c3"
  },
  "original": {
    "github": "https://github.com/vibeshotclub/vsc-skills/tree/main/vsc",
    "path": "vsc",
    "commit": "fcee81beb62a0907b206e62b269195dbd9aac4c3"
  }
}