{"schema_version":1,"workflow_uuid":"7e17ca03-29a6-410a-8798-00bc6c3e1aab","workflow_title":"tokrepo qa public requires private 20260522153134","page_url":"https://tokrepo.com/en/workflows/tokrepo-qa-public-requires-private-20260522153134-7e17ca03","raw_url":"https://tokrepo.com/raw/tokrepo-qa-public-requires-private-20260522153134-7e17ca03","metadata_url":"https://tokrepo.com/metadata/tokrepo-qa-public-requires-private-20260522153134-7e17ca03.json","install_plan_url":"https://api.tokrepo.com/api/v1/tokenboard/workflows/install-plan?uuid=7e17ca03-29a6-410a-8798-00bc6c3e1aab&target=codex","agent_metadata":{"asset_kind":"skill","target_tools":["claude_code","codex","gemini_cli"],"install_mode":"single","entrypoint":"qa-public-requires-private-20260522153134.md","risk_profile":{"executes_code":false,"modifies_global_config":false,"requires_secrets":[],"uses_absolute_paths":false,"network_access":false},"dependencies":{"npm":[],"pip":[],"brew":[],"system":[]},"content_hash":"7196689ebc73011923205fd360be8d379d14a9311a57329230769faf665966dc","verification":{"commands":[],"expected_files":["qa-public-requires-private-20260522153134.md"]}},"agent_fit":{"target":"codex","score":100,"status":"native","policy":"allow","why":["target_tools includes codex","asset_kind skill","install_mode single","markdown-only","policy allow","safe markdown-only Codex install","trust verified","verified publisher"],"asset_kind":"skill","install_mode":"single"},"trust":{"author_trust_level":"verified","verified_publisher":true,"asset_signed_hash":"7196689ebc73011923205fd360be8d379d14a9311a57329230769faf665966dc","signature_status":"hash_only","last_reviewed_at":"2026-05-23T08:56:36+08:00","install_count":0,"report_count":0,"dangerous_capability_badges":[],"review_status":"reviewed","signals":["author has published assets","content hash available","no dangerous capability badges","verified publisher","transitive_trust_low: at least one required dep has weak provenance"]},"provenance":{"owner_uuid":"4ddba6f3-0476-4a31-8a32-a355f91e76a9","owner_name":"henuwangkai","source_url":"https://tokrepo.com/en/workflows/tokrepo-qa-public-requires-private-20260522153134-7e17ca03","content_hash":"7196689ebc73011923205fd360be8d379d14a9311a57329230769faf665966dc","visibility":1,"created_at":"2026-05-22 15:36:42","updated_at":"2026-05-23 08:56:36"},"target_adapter":{"target":"codex","adapter":"skill-directory","root":"~/.codex/skills","entrypoint":"SKILL.md","manifest_path":"~/.codex/tokrepo/install-manifest.json","staging_root":"~/.codex/tokrepo/staged/7e17ca03-29a6-410a-8798-00bc6c3e1aab","install_modes":["single","bundle","split","stage_only"],"activates_files":true},"install_plan":{"schema_version":2,"target":"codex","asset_uuid":"7e17ca03-29a6-410a-8798-00bc6c3e1aab","asset_title":"tokrepo qa public requires private 20260522153134","source_url":"https://tokrepo.com/en/workflows/tokrepo-qa-public-requires-private-20260522153134-7e17ca03","install_mode":"single","entrypoint":"qa-public-requires-private-20260522153134.md","preconditions":[{"type":"target_supported","status":"pass","message":"codex install target is supported"},{"type":"install_root","status":"pass","message":"~/.codex/skills for activated skills; ~/.codex/tokrepo/staged for staged assets"},{"type":"target_tool_metadata","status":"pass","message":"metadata allows codex"},{"type":"content_hash","status":"pass","message":"asset metadata includes content_hash"},{"type":"trust_policy","status":"pass","message":"publisher trust level is verified"},{"type":"policy_decision","status":"pass","message":"allow for 7e17ca03-29a6-410a-8798-00bc6c3e1aab (single)"}],"actions":[{"type":"write_file","path":"~/.codex/skills/tokrepo-qa-public-requires-private-20260522153134-7e17ca03/SKILL.md","source_name":"qa-public-requires-private-20260522153134.md","sha256":"064442c5da18c05a6381f012ee671628f9a3b267c85114306dcb412f2f33bbfd","bytes":442,"risk":{"executes_code":false,"modifies_global_config":false,"requires_secrets":[],"uses_absolute_paths":false,"network_access":false},"if_exists":"overwrite","entrypoint":true}],"policy_decision":{"decision":"block","requires_confirmation":true,"reasons":["safe markdown-only Codex install","transitive dependency blocked (tokrepo-qa-private-dependency-20260522153134-84dbc800): transitive dependency is private","transitive trust weak (min<0.4 across required deps)"]},"requires_confirmation":true,"rollback":[{"type":"remove_file","path":"~/.codex/skills/tokrepo-qa-public-requires-private-20260522153134-7e17ca03/SKILL.md"}],"post_verify":[{"type":"file_sha256","path":"~/.codex/skills/tokrepo-qa-public-requires-private-20260522153134-7e17ca03/SKILL.md","sha256":"064442c5da18c05a6381f012ee671628f9a3b267c85114306dcb412f2f33bbfd"}],"metadata":{"asset_kind":"skill","target_tools":["claude_code","codex","gemini_cli"],"install_mode":"single","entrypoint":"qa-public-requires-private-20260522153134.md","risk_profile":{"executes_code":false,"modifies_global_config":false,"requires_secrets":[],"uses_absolute_paths":false,"network_access":false},"dependencies":{"npm":[],"pip":[],"brew":[],"system":[]},"content_hash":"7196689ebc73011923205fd360be8d379d14a9311a57329230769faf665966dc","verification":{"commands":[],"expected_files":["qa-public-requires-private-20260522153134.md"]}},"agent_fit":{"target":"codex","score":100,"status":"native","policy":"allow","why":["target_tools includes codex","asset_kind skill","install_mode single","markdown-only","policy allow","safe markdown-only Codex install","trust verified","verified publisher"],"asset_kind":"skill","install_mode":"single"},"trust":{"author_trust_level":"verified","verified_publisher":true,"asset_signed_hash":"7196689ebc73011923205fd360be8d379d14a9311a57329230769faf665966dc","signature_status":"hash_only","last_reviewed_at":"2026-05-23T08:56:36+08:00","install_count":0,"report_count":0,"dangerous_capability_badges":[],"review_status":"reviewed","signals":["author has published assets","content hash available","no dangerous capability badges","verified publisher","transitive_trust_low: at least one required dep has weak provenance"]},"provenance":{"owner_uuid":"4ddba6f3-0476-4a31-8a32-a355f91e76a9","owner_name":"henuwangkai","source_url":"https://tokrepo.com/en/workflows/tokrepo-qa-public-requires-private-20260522153134-7e17ca03","content_hash":"7196689ebc73011923205fd360be8d379d14a9311a57329230769faf665966dc","visibility":1,"created_at":"2026-05-22 15:36:42","updated_at":"2026-05-23 08:56:36"},"target_adapter":{"target":"codex","adapter":"skill-directory","root":"~/.codex/skills","entrypoint":"SKILL.md","manifest_path":"~/.codex/tokrepo/install-manifest.json","staging_root":"~/.codex/tokrepo/staged/7e17ca03-29a6-410a-8798-00bc6c3e1aab","install_modes":["single","bundle","split","stage_only"],"activates_files":true},"evidence_bundle":{"acceptance_gate":{"recommended_action":"install_after_plan","rule":"Agents should only activate an asset after evidence_bundle.integrity, policy_compatibility, rollback, and post_verify have been inspected.","status":"pass"},"asset_title":"tokrepo qa public requires private 20260522153134","asset_uuid":"7e17ca03-29a6-410a-8798-00bc6c3e1aab","eval_evidence":["https://tokrepo.com/evals/install-safety.json","https://tokrepo.com/evals/trust-evidence-coverage.json","https://tokrepo.com/evals/handoff-quality.json"],"generated_at":"2026-05-23T00:56:37Z","integrity":{"content_hash":"7196689ebc73011923205fd360be8d379d14a9311a57329230769faf665966dc","declared_content_hash":"7196689ebc73011923205fd360be8d379d14a9311a57329230769faf665966dc","file_count":1,"hash_algorithm":"sha256","install_plan_hash":"9861737e596213a32ffc545f4bf7133a2808d28dc346779af780aac911d57756"},"policy_compatibility":{"permission_envelope":{"destructive":false,"executes_code":false,"file_count":1,"filesystem_write":["~/.codex/skills"],"global_config_write":false,"network":false,"requires_secrets":[],"uses_absolute_paths":false},"policy_decision":{"decision":"allow","requires_confirmation":false,"reasons":["safe markdown-only Codex install"]},"requires_confirmation":false,"target":"codex","trust_score_v2":{"recommended_action":"install_after_plan","status":"trusted","trust_score":98}},"provenance":{"asset_kind":"skill","asset_title":"tokrepo qa public requires private 20260522153134","asset_uuid":"7e17ca03-29a6-410a-8798-00bc6c3e1aab","computed_bundle_hash":"7196689ebc73011923205fd360be8d379d14a9311a57329230769faf665966dc","content_hash":"7196689ebc73011923205fd360be8d379d14a9311a57329230769faf665966dc","created_at":"2026-05-22 15:36:42","generated_at":"2026-05-23T00:56:37Z","install_plan_hash":"9861737e596213a32ffc545f4bf7133a2808d28dc346779af780aac911d57756","owner_name":"henuwangkai","owner_uuid":"4ddba6f3-0476-4a31-8a32-a355f91e76a9","parent_uuid":"","schema_version":2,"source":"tokrepo_asset","source_url":"https://tokrepo.com/en/workflows/tokrepo-qa-public-requires-private-20260522153134-7e17ca03","updated_at":"2026-05-23 08:56:36","visibility":1},"sbom":{"asset_kind":"skill","asset_title":"tokrepo qa public requires private 20260522153134","asset_uuid":"7e17ca03-29a6-410a-8798-00bc6c3e1aab","capability_flags":{"destructive":false,"executes_code":false,"modifies_global_config":false,"network_access":false,"requires_secrets":[]},"content_hash":"7196689ebc73011923205fd360be8d379d14a9311a57329230769faf665966dc","dependencies":{"brew":[],"mcp":[],"npm":[],"pip":[],"system":[]},"files":[{"bytes":442,"path":"~/.codex/skills/tokrepo-qa-public-requires-private-20260522153134-7e17ca03/SKILL.md","role":"entrypoint","sha256":"064442c5da18c05a6381f012ee671628f9a3b267c85114306dcb412f2f33bbfd","source_name":"qa-public-requires-private-20260522153134.md"}],"format":"SBOM-lite","install_mode":"single","schema_version":1,"target":"codex"},"schema":"https://tokrepo.com/schemas/agent-evidence-bundle.schema.json","schema_version":1,"schemas":{"asset_verification":"https://tokrepo.com/schemas/asset-verification.schema.json","evidence_bundle":"https://tokrepo.com/schemas/agent-evidence-bundle.schema.json","install_plan":"https://tokrepo.com/schemas/install-plan.schema.json","provenance":"https://tokrepo.com/schemas/provenance.schema.json","sbom":"https://tokrepo.com/schemas/agent-evidence-bundle.schema.json#/properties/sbom"},"signature_evidence":{"content_hash":"7196689ebc73011923205fd360be8d379d14a9311a57329230769faf665966dc","hash_algorithm":"sha256","install_plan_hash":"9861737e596213a32ffc545f4bf7133a2808d28dc346779af780aac911d57756","schema_version":1,"signed_hash":"7196689ebc73011923205fd360be8d379d14a9311a57329230769faf665966dc","status":"hash_only","verification_notes":["hash_only evidence proves content integrity but not publisher identity unless an external signature verifies it"]},"source_url":"https://tokrepo.com/en/workflows/tokrepo-qa-public-requires-private-20260522153134-7e17ca03","target":"codex"},"sbom":{"asset_kind":"skill","asset_title":"tokrepo qa public requires private 20260522153134","asset_uuid":"7e17ca03-29a6-410a-8798-00bc6c3e1aab","capability_flags":{"destructive":false,"executes_code":false,"modifies_global_config":false,"network_access":false,"requires_secrets":[]},"content_hash":"7196689ebc73011923205fd360be8d379d14a9311a57329230769faf665966dc","dependencies":{"brew":[],"mcp":[],"npm":[],"pip":[],"system":[]},"files":[{"bytes":442,"path":"~/.codex/skills/tokrepo-qa-public-requires-private-20260522153134-7e17ca03/SKILL.md","role":"entrypoint","sha256":"064442c5da18c05a6381f012ee671628f9a3b267c85114306dcb412f2f33bbfd","source_name":"qa-public-requires-private-20260522153134.md"}],"format":"SBOM-lite","install_mode":"single","schema_version":1,"target":"codex"},"signature_evidence":{"content_hash":"7196689ebc73011923205fd360be8d379d14a9311a57329230769faf665966dc","hash_algorithm":"sha256","install_plan_hash":"9861737e596213a32ffc545f4bf7133a2808d28dc346779af780aac911d57756","schema_version":1,"signed_hash":"7196689ebc73011923205fd360be8d379d14a9311a57329230769faf665966dc","status":"hash_only","verification_notes":["hash_only evidence proves content integrity but not publisher identity unless an external signature verifies it"]},"provenance_v2":{"asset_kind":"skill","asset_title":"tokrepo qa public requires private 20260522153134","asset_uuid":"7e17ca03-29a6-410a-8798-00bc6c3e1aab","computed_bundle_hash":"7196689ebc73011923205fd360be8d379d14a9311a57329230769faf665966dc","content_hash":"7196689ebc73011923205fd360be8d379d14a9311a57329230769faf665966dc","created_at":"2026-05-22 15:36:42","generated_at":"2026-05-23T00:56:37Z","install_plan_hash":"9861737e596213a32ffc545f4bf7133a2808d28dc346779af780aac911d57756","owner_name":"henuwangkai","owner_uuid":"4ddba6f3-0476-4a31-8a32-a355f91e76a9","parent_uuid":"","schema_version":2,"source":"tokrepo_asset","source_url":"https://tokrepo.com/en/workflows/tokrepo-qa-public-requires-private-20260522153134-7e17ca03","updated_at":"2026-05-23 08:56:36","visibility":1},"transitive_dependencies":[{"uuid":"84dbc800-f813-4132-8bd9-8e4bfaebd0da","slug":"tokrepo-qa-private-dependency-20260522153134-84dbc800","title":"tokrepo qa private dependency 20260522153134","depth":1,"trust_score":0,"block_reason":"transitive dependency is private"}]}}