Skill audit report
long-image Audit report.
长图：两种输入，两种长图。改写稿 content.json → 1–4 张杂志风格长图（每节配图表和数据面板，附执行清单，21 套主题）；文章 article.md（原文、译文、逐字稿）→ 一字不改的原文长图（逐块读回校验，超长自动分张）。可以单独用（已有 content.json 或文章），也可以接在抓取、改写、翻译后面。Use when the user wants a 长图, 总结图, 杂志长图, infographic pages, or 原文长图 / 全文长图 / 原文排版 / 一字不改 / -f from an article or an existing content.json; also to re-render a content.json in another theme (换主题、换风格).
OpenAgentSkill Trust Score
OpenAgentSkill Trust Score
The Trust Score helps an agent decide whether a skill is safe enough to shortlist before installation.
GitHub adoption
WARN48
47 GitHub stars
Stars/forks activity
WARN48
47 stars, 13 forks; issue activity unavailable in current metadata
Recent maintenance
PASS100
3d since push
License clarity
PASS86
MIT
README/SKILL.md completeness
INFO76
Public metadata needs stronger README/SKILL.md context
Dependency/runtime risk
INFO64
command execution surface, network or browser surface
Install availability
PASS92
npx skills add threerocks/article2media --skill long-image
Install command safety
PASS92
standard package or runtime install path
Permission surface
WARN50
shell or command execution, network or browser access
Repository evidence
PASS86
https://github.com/threerocks/article2media/tree/main/skills/long-image
Review status
INFO66
AI review data available
Agent Proven outcomes
INFO54
No agent outcome data yet
Checks
Install and adoption review
Install path
92
npx skills add threerocks/article2media --skill long-image
Repository
88
https://github.com/threerocks/article2media/tree/main/skills/long-image
License
86
MIT
Maintenance
100
3d since push
AI review
55
The skill depends on a shared engine (article2media/engine) that is not included in the skill directory; it must be installed alongside. The scripts check for its presence and exit with a clear error if missing, which is acceptable but should be documented more prominently in SKILL.md.
README/SKILL.md completeness
84
Usable description available
Dependency risk
64
command execution surface, network or browser surface
Install command safety
92
standard package or runtime install path
Permission surface
50
shell or command execution, network or browser access
Stars/forks activity
48
47 stars, 13 forks; issue activity unavailable in current metadata
Adoption
42
47 GitHub stars
Warnings
- Permission surface may require sandboxing
- The skill depends on a shared engine (article2media/engine) that is not included in the skill directory; it must be installed alongside. The scripts check for its presence and exit with a clear error if missing, which is acceptable but should be documented more prominently in SKILL.md.
- Low GitHub adoption signal
- Quality score needs review
- Permission surface needs review: shell or command execution, network or browser access
- GitHub adoption: 47 GitHub stars
- Stars/forks activity: 47 stars, 13 forks; issue activity unavailable in current metadata
- Permission surface: shell or command execution, network or browser access
Method
This report combines public metadata, AI review output, repository freshness, install readiness, OpenAgentSkill events, quality scoring, trust checks, and the agent safety gate. It is not a full source-code security review.
Compare nearby options