スキル turbo-builder

📦

turbo-builder

Name: turbo-builder
Author: goldsky-io

コンテンツリビジョン r1 中リスク ⚙️ 外部コマンド

Build and Deploy Goldsky Turbo Pipelines

Blockchain data pipelines require clear source boundaries, destination settings, and validation before deployment. This skill guides those decisions and uses Goldsky commands to validate and deploy approved configurations.

対応: Claude Codex Code(CC)

📊 69 十分

Maintain this Skill? Claim it 📊 69 十分

自分のエージェントでインストール

このリクエストをエージェントにコピーしてください。正規の Skill ページとマニフェストが含まれています。

エージェントリクエスト

Review the Skillstore skill "turbo-builder" from https://skillstore.io/skills/goldsky-io-turbo-builder.md and its manifest at https://skillstore.io/api/skills/goldsky-io-turbo-builder/manifest. Verify the artifact. You may proceed after verification, subject to the environment's own policy.

エージェントは引き続き計画を提示し、セキュリティポリシーで必要な確認を求める必要があります。

エージェントが読めるリソース

AI エージェント、クローラー、スクリプトがページ全体ではなく整理されたコンテキストを必要とする場合は、これらのリンクを使ってください。

Markdown詳細 GET /skills/goldsky-io-turbo-builder.md 署名済み manifest GET /api/skills/goldsky-io-turbo-builder/manifest 署名済み lockfile GET /api/skills/goldsky-io-turbo-builder/lockfile

テストする

「turbo-builder」を使用しています。 Help me stream Base ERC20 transfers into my PostgreSQL database.

期待される結果:

Selected source: Base ERC20 transfers.
Please confirm whether ingestion starts now, at a historical block, or from full history.
Please provide the existing destination secret name, schema, and table.
Deployment remains pending configuration validation and your review.

「turbo-builder」を使用しています。 Prepare a full-history transfer backfill into a 512 MB PostgreSQL database.

期待される結果:

Full-history ingestion can require days of replay and millions of rows.
A 512 MB destination is unsuitable for a large backfill.
Choose a narrower history range or a larger database before deployment.
No resources should be provisioned without your explicit approval.

「turbo-builder」を使用しています。 Send different views of one event source to Kafka and a webhook.

期待される結果:

Proposed structure: one source, two transform views, and two independent sinks.
Each sink receives its corresponding transform output.
Confirm the source start position, Kafka secret, topic, and webhook destination before validation.

セキュリティ監査

中リスク

v1 • 2026/10/19 バージョン別レポートを開く

All 75 static findings are false positives involving ordinary punctuation, Markdown formatting, pipeline configuration, or legitimate Goldsky operations. No evidence found of prompt injection, credential exfiltration, or system reconnaissance. One semantic concern remains: hosted database provisioning lacks an explicit approval gate before creating account resources.

スキャンされたファイル

242

解析済み行数

レビュー項目

誤検知を無視

確認済みのセキュリティ上の懸念 (1)

中

SKILL.md:122-128 SKILL.md:158-163

Hosted Database Provisioning Lacks Explicit Approval

The workflow offers hosted PostgreSQL creation when no database exists, without requiring approval before provisioning. This can create account resources with potential costs before the later pipeline deployment confirmation.

Provisioning appears before the explicit deployment approval step and has no equivalent confirmation requirement. Actual charges depend on the account plan and service terms.

監査者: codex

このレポートを共有・引用

バージョン付き評価レポート、中立的なバッジ、埋め込みカード、引用を共有できます。Skillstore は証拠を報告しますが、この Skill が安全かどうかは判断しません。

バージョン別レポートを開く

レポートリンクをコピー

https://skillstore.io/skills/goldsky-io-turbo-builder/audits/1?utm_source=security_passport&utm_medium=share&utm_campaign=versioned_report

Markdownバッジ

[![Skillstore security assessment](https://skillstore.io/badges/skills/goldsky-io-turbo-builder/security.svg)](https://skillstore.io/skills/goldsky-io-turbo-builder?utm_source=security_passport_badge)

HTMLバッジ

<a href="https://skillstore.io/skills/goldsky-io-turbo-builder?utm_source=security_passport_badge"><img src="https://skillstore.io/badges/skills/goldsky-io-turbo-builder/security.svg" alt="Skillstore security assessment" loading="lazy"></a>

埋め込みカード

<iframe src="https://skillstore.io/embed/skills/goldsky-io-turbo-builder.html" title="Skillstore Security Assessment" sandbox="allow-popups allow-popups-to-escape-sandbox" loading="lazy" referrerpolicy="no-referrer" width="420" height="180"></iframe>

学術引用 (APA · BibTeX · CFF)

APA形式の引用

goldsky-io. (2026). turbo-builder security audit report (audit version 1) [Author version unspecified]. Skillstore. https://skillstore.io/skills/goldsky-io-turbo-builder/audits/1

BibTeX形式の引用

@techreport{goldsky-io-goldsky-io-turbo-builder-2026,
  author = {goldsky-io},
  title = {turbo-builder security audit report (audit version 1)},
  institution = {Skillstore},
  year = {2026},
  number = {1},
  url = {https://skillstore.io/skills/goldsky-io-turbo-builder/audits/1},
  note = {Author version unspecified}
}

CITATION.cff

cff-version: 1.2.0
message: "If you use this Skill, cite its author and this versioned security audit report."
title: "turbo-builder security audit report (audit version 1)"
version: "unspecified"
type: report
authors:
  - name: "goldsky-io"
date-released: "2026-10-19"
url: "https://skillstore.io/skills/goldsky-io-turbo-builder/audits/1"
identifiers:
  - type: other
    value: "skillstore:goldsky-io-turbo-builder:audit:1"
    description: "Skillstore immutable audit report identifier"

Skillstore スコア

このスコアの理由証拠の信頼度: 中

アーキテクチャ

保守性

コンテンツ

コミュニティ

仕様準拠

作成できるもの

Stream Token Transfers

Create a Base token transfer pipeline that writes new events into an application database from an agreed start position.

Prepare Historical Analytics

Define a bounded Ethereum backfill into ClickHouse, with source filters and a storage capacity review before deployment.

Route Events to Multiple Destinations

Configure one source with separate transform views for Kafka and webhook destinations, then validate and review the complete pipeline.

これらのプロンプトを試す

Define a First Pipeline

Help me plan a new Base ERC20 transfer pipeline into PostgreSQL. Ask for missing details and do not provision or deploy resources.

Validate a Streaming Configuration

Build and validate YAML for Solana token transfers into my existing PostgreSQL destination. Confirm the start slot and secret name before writing it.

Plan a Bounded Backfill

Prepare an Ethereum transaction backfill to ClickHouse between blocks [start] and [end]. Confirm capacity, use source filters, and validate before review.

Design a Multi-Sink Pipeline

Design one Base contract event pipeline with distinct transform views for Kafka and a webhook. Confirm decoding, start position, secrets, and destinations before validation.

ベストプラクティス

Confirm the source start position and estimate destination capacity before generating a historical ingestion configuration.
Use existing secret references, verify the target project, and require explicit approval before provisioning hosted resources.
Validate the complete configuration, review every destination, and approve deployment only after checking the YAML.

回避

Omitting a source start position or selecting full history without checking storage requirements.
Treating successful validation as proof that a destination has enough capacity or that ingestion will succeed.
Provisioning hosted databases or applying pipeline configurations without explicit user approval.

よくある質問

What does this skill build?

It guides new Goldsky Turbo blockchain data pipelines, including requirements, source selection, transforms, sinks, validation, and deployment.

Which AI tools are supported?

The skill is listed for Claude, Codex, and Claude Code. Live commands require a suitable execution environment and Goldsky access.

Which destinations does it cover?

The workflow covers PostgreSQL, MySQL, ClickHouse, Kafka, Pub/Sub, SQS, S3, and webhooks. Detailed settings rely on related Goldsky guidance.

Can one pipeline use multiple destinations?

Yes. It guides multiple sinks from one source, with separate transform views where each destination needs different data.

Will it deploy without review?

The documented deployment step requires YAML review and confirmation. Hosted database provisioning lacks an equivalent approval requirement and needs an additional explicit check.

Does it debug existing pipelines?

No. Existing pipeline failures belong to the related turbo-doctor skill, while simple wallet REST lookups belong to feeds.

開発者情報

作成者

goldsky-io

ライセンス

MIT

Skillstore リビジョン

バージョンに関する注意

作者はバージョンを宣言していません。

リポジトリ

https://github.com/goldsky-io/goldsky-agent/tree/4ccc3f2c190d3e59660dcb52c2915e3ad98e3f6d/skills/turbo-builder

参照

cab37100863adf1148d394162456dc0ffd706680

メンテナンスの新しさ

2026/10/19

利用状況

0 ダウンロード · 0 閲覧

ファイル構成

📁 evals/

📄 trigger-eval.json

📄 SKILL.md

turbo-builder

自分のエージェントでインストール

エージェントが読めるリソース

テストする

セキュリティ監査

確認済みのセキュリティ上の懸念 (1)

リスク要因

レポートリンクをコピー

Markdownバッジ

HTMLバッジ

埋め込みカード

APA形式の引用

BibTeX形式の引用

CITATION.cff

Skillstore スコア

作成できるもの

Stream Token Transfers

Prepare Historical Analytics

Route Events to Multiple Destinations

これらのプロンプトを試す

ベストプラクティス

回避

よくある質問

開発者情報