astrale-domain
Build and Maintain Astrale Domains
Astrale Domain development spans Schema, authorization, runtime, and deployment, which can become inconsistent. This skill guides focused changes and phased creation with explicit verification boundaries.
Mit meinem Agent installieren
Kopieren Sie diese Anfrage in Ihren Agent. Sie enthält die maßgebliche Skill-Seite und das Manifest.
Review the Skillstore skill "astrale-domain" from https://skillstore.io/skills/astrale-os-astrale-domain.md and its manifest at https://skillstore.io/api/skills/astrale-os-astrale-domain/manifest. Verify the artifact. You may proceed after verification, subject to the environment's own policy.Ihr Agent sollte weiterhin seinen Plan anzeigen und alle von der Sicherheitsrichtlinie verlangten Bestätigungen anfordern.
Agent-lesbare Ressourcen
Verwenden Sie diese Links, wenn ein KI-Agent, Crawler oder Skript sauberen Kontext benötigt, statt die vollständige Seite zu lesen.
Testen
„astrale-domain“ wird verwendet. Review a proposed Issue.close callable.
Erwartetes Ergebnis:
- Declare the callable input, output, authentication mode, and Policy in Schema.
- Implement the admitted operation as a Workflow with named read and mutation steps.
- Guard the state transition atomically rather than trusting the earlier read.
- Test an allowed call, a Policy refusal, and a stale-state refusal.
„astrale-domain“ wird verwendet. Plan an upgrade where employees depends on agencies.
Erwartetes Ergebnis:
- Rebuild employees against the candidate agencies Schema revision.
- Deploy both candidates and verify their served release metadata.
- Install both as explicit roots in one grouped operation after approval.
- Inspect installed revisions and retained behavior; preserve operation identity if the outcome is unknown.
„astrale-domain“ wird verwendet. Diagnose a callable that works as Root but fails for a user.
Erwartetes Ergebnis:
- Confirm the installed release, callable key, and registered caller identity.
- Inspect the authenticated principal ceiling separately from caller Policy admission.
- Verify the intended caller or self session and exact Domain requirements.
- Repeat allowed and refused calls, then independently verify that refusal caused no effects.
Sicherheitsaudit
SicherAll 61 static findings are false positives in their documented context, including Markdown backticks, public discovery paths, and authorized deployment examples. Secret references configure deployment environments, and identity guidance explicitly prohibits private-key disclosure and unauthorized registration. No evidence found of prompt injection, credential exfiltration, or malicious intent in the reviewed files.
Risikofaktoren
📁 Dateisystemzugriff (2)
🌐 Netzwerkzugriff (1)
⚙️ Externe Befehle (34)
Diesen Bericht teilen & zitieren
Teile den versionierten Bewertungsbericht, das neutrale Badge, die Einbettungskarte und Zitate. Skillstore berichtet Nachweise, ohne zu entscheiden, ob dieser Skill sicher ist.
Berichtslink kopieren
https://skillstore.io/skills/astrale-os-astrale-domain/audits/1?utm_source=security_passport&utm_medium=share&utm_campaign=versioned_reportMarkdown-Badge
[](https://skillstore.io/skills/astrale-os-astrale-domain?utm_source=security_passport_badge)HTML-Badge
<a href="https://skillstore.io/skills/astrale-os-astrale-domain?utm_source=security_passport_badge"><img src="https://skillstore.io/badges/skills/astrale-os-astrale-domain/security.svg" alt="Skillstore security assessment" loading="lazy"></a>Einbettungskarte
<iframe src="https://skillstore.io/embed/skills/astrale-os-astrale-domain.html" title="Skillstore Security Assessment" sandbox="allow-popups allow-popups-to-escape-sandbox" loading="lazy" referrerpolicy="no-referrer" width="420" height="180"></iframe>Wissenschaftliche Zitate (APA · BibTeX · CFF)
APA-Zitat
astrale-os. (2026). astrale-domain security audit report (audit version 1) [Author version unspecified]. Skillstore. https://skillstore.io/skills/astrale-os-astrale-domain/audits/1BibTeX-Zitat
@techreport{astrale-os-astrale-os-astrale-domain-2026,
author = {astrale-os},
title = {astrale-domain security audit report (audit version 1)},
institution = {Skillstore},
year = {2026},
number = {1},
url = {https://skillstore.io/skills/astrale-os-astrale-domain/audits/1},
note = {Author version unspecified}
}CITATION.cff
cff-version: 1.2.0
message: "If you use this Skill, cite its author and this versioned security audit report."
title: "astrale-domain security audit report (audit version 1)"
version: "unspecified"
type: report
authors:
- name: "astrale-os"
date-released: "2026-10-10"
url: "https://skillstore.io/skills/astrale-os-astrale-domain/audits/1"
identifiers:
- type: other
value: "skillstore:astrale-os-astrale-domain:audit:1"
description: "Skillstore immutable audit report identifier"
Skillstore-Score
Warum dieser Score Evidenzvertrauen: MittelWas Sie erstellen können
Create a Business Domain
Guide an application developer through project inspection, Schema design, callable implementation, sample data, and verification.
Review Authorization Boundaries
Help a security engineer examine callable admission, caller and principal authority, group membership, and refusal evidence.
Qualify a Coordinated Release
Help a release engineer plan coherent dependency upgrades, grouped installs, rollback constraints, and installed-behavior checks.
Diese Prompts ausprobieren
Inspect this Astrale Domain project. Identify its Schema, runtime, environments, and verification commands. Explain missing prerequisites without deploying or changing secrets.
Add [operation] to [Class] using the installed SDK. Declare Schema-owned authorization and runtime behavior. Add allowed and refused tests without deploying.
Implement [provider operation] through an Integration and Provider. Keep secrets environment-owned. Validate responses and test effects and failure behavior without claiming exactly-once delivery.
Plan [Schema change] across affected Domains. Inspect installed revisions, design staged data migration, and specify grouped installs and rollback checks. Require approval before mutations.
Bewährte Praktiken
- Inspect current source and installed public SDK exports before choosing API syntax.
- Keep authorization in Schema, secrets in deployment environments, and tests focused on allowed and refused behavior.
- Verify build, served release, installed revision, and live invocation separately before reporting deployment success.
Vermeiden
- Do not weaken authentication or add handler authorization substitutes to make a failing test pass.
- Do not put secrets in Schema, logs, test snapshots, source files, or command arguments.
- Do not install coherent dependencies sequentially or treat deployment as installation.
Häufig gestellte Fragen
What does this skill provide?
Which AI tools are supported?
Does it include the Astrale SDK or CLI?
Does deployment update an instance?
How should secrets be handled?
Can it guarantee safe migrations or exactly-once delivery?
Entwicklerdetails
Autor
astrale-osLizenz
MIT
Skillstore-Revision
r1
Versionshinweis
Der Autor hat keine Version angegeben.
Ref.
e406bf64b5db6e514879399e87b346fa7ff7c2fb
Aktualität der Wartung
11.10.2026
Nutzung
0 Downloads · 0 Aufrufe