Habilidades extension-core-infrastructure
📦

extension-core-infrastructure

v1.1.0 Revisión del contenido r1 Riesgo bajo ⚙️ Comandos externos🌐 Acceso a red

Build Caffeine AI Core Infrastructure

Connecting React applications to Internet Computer backends requires coordinated authentication, actor, query, and storage setup. This skill provides proven integration and migration guidance for that foundation.

Compatible con: Claude Codex Code(CC)
🥉 77 Bronce

Instalar con mi Agente

Copia esta solicitud en tu Agente. Incluye la página canónica del Skill y el manifiesto.

Solicitud de agente
Review the Skillstore skill "extension-core-infrastructure" from https://skillstore.io/skills/caffeinelabs-extension-core-infrastructure.md and its manifest at https://skillstore.io/api/skills/caffeinelabs-extension-core-infrastructure/manifest. Verify the artifact. You may proceed after verification, subject to the environment's own policy.

Tu Agente debe seguir mostrando su plan y solicitar cualquier confirmación exigida por la política de seguridad.

Recursos legibles por agentes

Usa estos enlaces cuando un agente de IA, crawler o script necesite contexto limpio en vez de leer la página completa.

Detalle Markdown GET /skills/caffeinelabs-extension-core-infrastructure.md Manifest firmado GET /api/skills/caffeinelabs-extension-core-infrastructure/manifest Lockfile firmado GET /api/skills/caffeinelabs-extension-core-infrastructure/lockfile

Pruébalo

Usando "extension-core-infrastructure". Explain which authentication state should control protected UI after a page reload.

Resultado esperado:

Use isAuthenticated for protected UI. A restored session can be authenticated while the interactive login success state remains false.

Usando "extension-core-infrastructure". Summarize the v1 dependency migration.

Resultado esperado:

  • Remove direct legacy DFINITY dependencies.
  • Add the documented ICP SDK authentication and core packages.
  • Update imports to the corresponding ICP SDK subpaths.
  • Change the Vite deduplication target to the ICP SDK core package.

Usando "extension-core-infrastructure". What happens to backend actors after login or logout?

Resultado esperado:

The actor is recreated with the new identity. Dependent queries are then invalidated and fetched again.

Auditoría de seguridad

Riesgo bajo
v1 • 23/7/2026 Abrir el informe versionado

All 38 static findings are false positives. The command findings are Markdown formatting, the URL is a documentation link, and the reconnaissance hit is a documented boolean. A low-severity privacy concern remains because verified email is requested by default unless applications opt out.

2
Archivos escaneados
199
Líneas analizadas
0
Elementos de revisión
0
Falsos positivos ignorados

Preocupaciones de seguridad confirmadas (1)

Bajo
migration/v0.x.y-to-v1.x.y.md:38-45
Default Verified Email Request
The v1 provider requests the verified_email attribute by default. Users receive a consent prompt, but applications may request an identity attribute they do not need.
The migration guide explicitly states that attribute verification defaults to requesting verified_email and documents the opt-out setting.

Factores de riesgo

⚙️ Comandos externos (36)
SKILL.md:21-26 SKILL.md:26-28 SKILL.md:28-36 SKILL.md:36-40 SKILL.md:40 SKILL.md:42-57 SKILL.md:57-59 SKILL.md:59-67 SKILL.md:67 SKILL.md:68 SKILL.md:69 SKILL.md:70 SKILL.md:71 SKILL.md:72 SKILL.md:73 SKILL.md:74 SKILL.md:75 SKILL.md:79 SKILL.md:81 SKILL.md:82 SKILL.md:83 SKILL.md:84 SKILL.md:85 SKILL.md:86 SKILL.md:88 SKILL.md:92-93 SKILL.md:93-97 SKILL.md:97-100 SKILL.md:100-106 SKILL.md:106-108 SKILL.md:108 SKILL.md:110-114 SKILL.md:114-127 SKILL.md:127-133 SKILL.md:133 SKILL.md:134
🌐 Acceso a red (1)
SKILL.md:13
Auditado por: codex
Compartir y citar este informe

Comparte el informe de evaluación versionado, la insignia neutral, la tarjeta insertable y las citas. Skillstore presenta evidencias sin decidir si este Skill es seguro.

Abrir el informe versionado
Evaluación de seguridad

Copiar enlace del informe

https://skillstore.io/skills/caffeinelabs-extension-core-infrastructure/audits/1?utm_source=security_passport&utm_medium=share&utm_campaign=versioned_report

Insignia Markdown

[![Skillstore security assessment](https://skillstore.io/badges/skills/caffeinelabs-extension-core-infrastructure/security.svg)](https://skillstore.io/skills/caffeinelabs-extension-core-infrastructure?utm_source=security_passport_badge)

Insignia HTML

<a href="https://skillstore.io/skills/caffeinelabs-extension-core-infrastructure?utm_source=security_passport_badge"><img src="https://skillstore.io/badges/skills/caffeinelabs-extension-core-infrastructure/security.svg" alt="Skillstore security assessment" loading="lazy"></a>

Tarjeta para insertar

<iframe src="https://skillstore.io/embed/skills/caffeinelabs-extension-core-infrastructure.html" title="Skillstore Security Assessment" sandbox="allow-popups allow-popups-to-escape-sandbox" loading="lazy" referrerpolicy="no-referrer" width="420" height="180"></iframe>
Citas académicas (APA · BibTeX · CFF)

Cita APA

caffeinelabs. (2026). extension-core-infrastructure security audit report (audit version 1) [Author version 1.1.0]. Skillstore. https://skillstore.io/skills/caffeinelabs-extension-core-infrastructure/audits/1

Cita BibTeX

@techreport{caffeinelabs-caffeinelabs-extension-core-infrastructure-2026, author = {caffeinelabs}, title = {extension-core-infrastructure security audit report (audit version 1)}, institution = {Skillstore}, year = {2026}, number = {1}, url = {https://skillstore.io/skills/caffeinelabs-extension-core-infrastructure/audits/1}, note = {Author version 1.1.0} }

CITATION.cff

cff-version: 1.2.0 message: "If you use this Skill, cite its author and this versioned security audit report." title: "extension-core-infrastructure security audit report (audit version 1)" version: "1.1.0" type: report authors: - name: "caffeinelabs" date-released: "2026-07-23" url: "https://skillstore.io/skills/caffeinelabs-extension-core-infrastructure/audits/1" identifiers: - type: other value: "skillstore:caffeinelabs-extension-core-infrastructure:audit:1" description: "Skillstore immutable audit report identifier"

Puntuación de Skillstore

Por qué esta puntuación Confianza de la evidencia: Medio
55
Arquitectura
100
Mantenibilidad
87
Contenido
65
Comunidad
91
Cumplimiento de la especificación

Lo que puedes crear

Configure a New Frontend

Set up shared providers, authentication state, and typed backend access for a new Caffeine AI React application.

Upgrade an Existing Application

Replace legacy DFINITY packages, update imports, adjust Vite deduplication, and review the new attribute verification default.

Review Authentication Architecture

Verify UI gating, login lifecycle handling, actor recreation, and dependent query refresh behavior.

Prueba estos prompts

Explain the Infrastructure 
Explain how this core infrastructure supports authentication, backend actors, React Query, and storage dependencies. Define each component for a new React developer.
Plan a New Integration 
Create an integration plan for my React application using this skill. Include dependencies, provider order, authentication states, actor loading, and verification steps.
Diagnose Authentication State 
Review my authentication flow against this skill. Identify incorrect use of login success, missing initialization handling, and unsafe authenticated UI gating.
Design a Version Migration 
Design a v0 to v1 migration for my project. Map dependencies and imports, assess verified email requirements, update Vite deduplication, and define tests.

Mejores prácticas

  • Gate protected interfaces with the authenticated state, including after stored session restoration.
  • Disable login actions while identity initialization or interactive login is active.
  • Decide whether verified email is necessary before accepting the provider default.

Evitar

  • Do not use interactive login success as the persistent authentication signal.
  • Do not add local pending state around the fire-and-forget login and clear functions.
  • Do not keep legacy DFINITY dependencies beside their ICP SDK replacements.

Preguntas frecuentes

Is manual integration required?
The package is automatically included in Caffeine AI projects, but applications still need the documented provider composition and hook usage.
Which state should protect authenticated content?
Use isAuthenticated because it covers both interactive login and restored sessions.
Should login and clear be awaited?
No. They are fire-and-forget functions, and the hook exposes state fields for their asynchronous lifecycle.
When is the backend actor available?
The actor is null while loading. Check both the actor value and the fetching state before calling backend methods.
Does v1 request identity attributes?
Yes. Verified email is requested by default, and applications can disable attribute requests when they are unnecessary.
What changes during the v1 migration?
Update dependencies, replace legacy import paths, change Vite deduplication, and review the verified email default.

Detalles del desarrollador

Licencia

MIT

Versión del autor

v1.1.0

Revisión de Skillstore

r1

Repositorio

https://github.com/caffeinelabs/skills/tree/10fb452613c797633b8cb33639fc9a754a138039/skills/extension-core-infrastructure

Ref.

f32f934280aa94e399d875d7cf7b2ed16d1b82a3

Actualidad del mantenimiento

23/7/2026

Uso

0 descargas · 0 vistas

Estructura de archivos

📁 migration/

📄 v0.x.y-to-v1.x.y.md

📄 SKILL.md