{
  "$schema": "https://bestaiskill.com/schemas/agent-install/2.json",
  "skill": "wan-2-7",
  "built": "2026-10-26",
  "control_level": 4,
  "control_level_label": "L4 高权限",
  "capabilities": [
    "execute_command",
    "network",
    "write_file"
  ],
  "required_controls": {
    "agent": [
      "sandbox_recommended",
      "graded_authorization"
    ],
    "admin": [
      "approval_process",
      "rollback_support",
      "full_audit"
    ]
  },
  "evidence": [
    {
      "file": "scripts/",
      "summary": "Executes local script or command: (The skill itself contains no scripts) The host agent executes the external CLI via Bash: `runcomfy run <vendor>/<model>/<endp`"
    },
    {
      "file": "网络端点",
      "summary": "Declares external network access: POST https://model-api.runcomfy.net/v1/models/wan-ai/wan-2-7/text-to-video ("
    },
    {
      "file": "本地工作目录",
      "summary": "File read/write and artifact output: Generated artifacts are downloaded and written to `--output-dir` by the external CLI (documentation notes that single files > 2 GiB will abort to prevent disk exhaustion)"
    }
  ],
  "verification": {
    "method": "第二遍独立重读 + 反查（换角度抓第一遍的错）：① git ls-tree HEAD + ls -a 核实 wan-2-7/ 仅 SKILL.md；② 8 个 schema 字段逐行重读并与正文其它章节交叉比对（由此发现『多参考』宣称无对应字段）；③ 全量 token 扫描（curl/wget/sudo/chmod/rm/eval/base64/API_KEY/secret/password/source/.sh/python/os.system）+ awk 抽取全部代码块复核：可执行命令只有 `npx skills add ...` 与 `runcomfy run ...` 两类；④ 5 份 SKILL.md 逐段 diff 定位共享段落；⑤ 路由建议目标逐一回查仓库目录：seedance-v2/、happyhorse-1-0/、kling-3-0/ 存在，'Kling Video O1' 与 'LTX 2' 在仓内无同名技能（全仓无 ltx-* 目录；kling-3-0 自称 'Kling 3.0 (also called Kling V3.0)'）；⑥ GitHub API 复核 pin commit 与元数据；⑦ 功能声明 vs 实际能力夸大检查。",
    "second_pass": [
      {
        "item": "skill 目录内容 = 仅 SKILL.md",
        "status": "ok",
        "detail": "git ls-tree HEAD 与 ls -a 双向核实；仓库根仅 LICENSE + README.md + 31 个技能目录，无 scripts/、plugins/、.claude/。"
      },
      {
        "item": "全部外部依赖条目回查调用点真实存在",
        "status": "ok",
        "detail": "runcomfy CLI 调用点 4 处（默认/带音轨/字面控制示例）、npm 安装 1 处、npx skills 1 处、model-api 端点 1 处（How it works）、下载白名单 1 处（Security & Privacy）、文档/模型页/GitHub 链接多处，均实读命中。"
      },
      {
        "item": "『multi-reference conditioning / 最多 5 个参考素材』与输入 schema 一致",
        "status": "discrepancy",
        "detail": "description 写着 multi-reference conditioning，Where it shines 写 'Up to 5 reference media (image / video / voice)'，Limitations 写 'Reference media cap 5 (image + video + voice combined)'；但『Endpoints + input schema』表只有 prompt / audio_url / aspect_ratio / resolution / duration / negative_prompt / enable_prompt_expansion / seed 八个字段，没有任何 image/video 参考输入。结论：文档宣称了 schema 无法表达的能力（要么 schema 表不完整、要么能力被夸大），照 schema 写调用的 agent 拿不到该能力。"
      },
      {
        "item": "路由建议的目标模型在本仓有对应技能",
        "status": "discrepancy",
        "detail": "'Cinematic motion editing on existing footage | Kling Video O1' 与 'Ultra-fast iteration | LTX 2' 两个建议目标在仓库内没有同名技能目录（全仓无 ltx-* 目录；kling-3-0/SKILL.md 自称 'Kling 3.0 (also called Kling V3.0)'，未使用 'Kling Video O1' 这一名称，该名称只出现在 wan-2-7/seedance-v2/happyhorse-1-0/ai-video-generation 四份文档里）。路由表能指向自家技能（Seedance/HappyHorse），但这两条是悬空引用。"
      },
      {
        "item": "Security & Privacy 的技术断言可在本仓证实",
        "status": "unlocatable",
        "detail": "token 权限 0600、2 GiB 下载上限、CLI 不做 shell 展开、下载白名单、退出码语义均为仓外 @runcomfy/cli 行为；仓内无 CLI 源码或版本 pin，只能作为文档自述引用。同仓 runcomfy-cli/SKILL.md 是同一套自述（同源转述，非独立证据）。"
      },
      {
        "item": "安装一行与 GitHub 链接指向旧仓 agentspace-so/runcomfy-skills",
        "status": "discrepancy",
        "detail": "SKILL.md 安装行写 `npx skills add agentspace-so/runcomfy-skills --skill wan-2-7 -g`，GitHub 链接指向 agentspace-so/runcomfy-skills；本仓储物 pin 在 prime-skills/runcomfy-agent-skills（README 亦用 runcomfy-agent-skills）。gh api：agentspace-so/runcomfy-skills 仍存在（5★、最后推送 2026-04-29、含 wan-2-7 目录），是另一份较旧仓；prime-skills/runcomfy-agent-skills 与 agentspace-so/runcomfy-agent-skills 为同一仓（gh 对两者返回相同 stats，full_name=prime-skills/runcomfy-agent-skills）。按文档安装可能装到旧版。"
      },
      {
        "item": "音轨规格纪律在正文各处一致",
        "status": "ok",
        "detail": "schema 行（WAV/MP3, 3–30s, ≤15MB）、Prompting 段（'`audio_url` must be 3–30s, ≤15MB, WAV/MP3. Out-of-range files reject.'）、Limitations 段（'Audio specs — 3–30s, ≤15MB, WAV/MP3 only.'）三处口径一致。"
      },
      {
        "item": "时长/画幅/分辨率口径一致",
        "status": "ok",
        "detail": "duration 2–15（default 5）与 Limitations 'Duration cap 15s' 一致；aspect_ratio 5 值与 'only the 5 documented values' 一致；resolution 720p/1080p 与 'No native 4K — 1080p ceiling' 一致。"
      },
      {
        "item": "未声明 allowed-tools（执行面未收窄）",
        "status": "discrepancy",
        "detail": "本技能 frontmatter 无 allowed-tools；同仓 runcomfy-cli/SKILL.md 明确声明 `allowed-tools: Bash(runcomfy *)`。家族内部对工具权限的声明不一致——本技能把执行面完全留给宿主默认。"
      },
      {
        "item": "prompt 注入面陈述与实际入口一致",
        "status": "ok",
        "detail": "正文 'the user prompt is passed as a JSON string to the CLI via `--input`. The CLI does NOT shell-expand the prompt'、'No shell injection surface from prompt content' 与 How to invoke 的调用形态一致，未见夸大或淡化。"
      },
      {
        "item": "元数据（commit/stars/last_push/license/installs）",
        "status": "ok",
        "detail": "本地 HEAD fca19ae084c2ae4667f5c8affbb99da5103d5832；gh api stars=48、pushed_at=2026-05-15T10:59:51Z、spdx=MIT；仓库根 LICENSE 为 MIT（Copyright (c) 2026 RunComfy / agentspace-so）；installs=412,000 取自池内 skills.sh-alltime 记录。"
      }
    ],
    "level": 1,
    "level_label": "V1 已固定",
    "commit": "fca19ae084c2ae4667f5c8affbb99da5103d5832",
    "sha256": "63f9073a45acf23a95754df0e5faa89985bf3be74a594a54c1846f1b8dd3d444",
    "reviewed_by": null,
    "reviewed_at": null
  },
  "assessed_at": "2026-10-25",
  "method_version": "2.0",
  "mirror": {
    "archive": "https://skillpub.pages.dev/r2/v/2026-09-15/wan-2-7.tar.gz",
    "sha256": "63f9073a45acf23a95754df0e5faa89985bf3be74a594a54c1846f1b8dd3d444",
    "commit": "fca19ae084c2ae4667f5c8affbb99da5103d5832"
  },
  "original": {
    "github": "https://github.com/prime-skills/runcomfy-agent-skills/tree/main/wan-2-7",
    "path": "wan-2-7",
    "commit": "fca19ae084c2ae4667f5c8affbb99da5103d5832"
  }
}