Pipeline changes can reset checkpoints, and unfamiliar log errors can delay recovery. This skill provides lifecycle guidance, monitoring commands, and a pattern-based log analysis helper.
Review the Skillstore skill "turbo-operations" from https://skillstore.io/skills/goldsky-io-turbo-operations.md and its manifest at https://skillstore.io/api/skills/goldsky-io-turbo-operations/manifest. Verify the artifact. You may proceed after verification, subject to the environment's own policy.
エージェントは引き続き計画を提示し、セキュリティポリシーで必要な確認を求める必要があります。
エージェントが読めるリソース
AI エージェント、クローラー、スクリプトがページ全体ではなく整理されたコンテキストを必要とする場合は、これらのリンクを使ってください。
All 69 static findings are false positives involving documentation, comments, arithmetic, or expected log retrieval. No evidence found of prompt injection, credential exfiltration, or hidden destructive execution. Credential examples nevertheless encourage command-line secret entry, which can expose passwords through shell history or process listings.
Credential Examples Expose Secrets Through Command Arguments
Examples place database passwords in connection URLs and secret values in CLI arguments. Following them can expose credentials through shell history or process listings.
The documented commands explicitly put credential placeholders in process arguments. Exposure depends on user execution and host protections; no actual credentials or exfiltration are present.
goldsky-io. (2026). turbo-operations security audit report (audit version 1) [Author version unspecified]. Skillstore. https://skillstore.io/skills/goldsky-io-turbo-operations/audits/1
BibTeX形式の引用
@techreport{goldsky-io-goldsky-io-turbo-operations-2026,
author = {goldsky-io},
title = {turbo-operations security audit report (audit version 1)},
institution = {Skillstore},
year = {2026},
number = {1},
url = {https://skillstore.io/skills/goldsky-io-turbo-operations/audits/1},
note = {Author version unspecified}
}
CITATION.cff
cff-version: 1.2.0
message: "If you use this Skill, cite its author and this versioned security audit report."
title: "turbo-operations security audit report (audit version 1)"
version: "unspecified"
type: report
authors:
- name: "goldsky-io"
date-released: "2026-10-19"
url: "https://skillstore.io/skills/goldsky-io-turbo-operations/audits/1"
identifiers:
- type: other
value: "skillstore:goldsky-io-turbo-operations:audit:1"
description: "Skillstore immutable audit report identifier"
Skillstore スコア
このスコアの理由証拠の信頼度: 中
45
アーキテクチャ
85
保守性
87
コンテンツ
65
コミュニティ
91
仕様準拠
作成できるもの
Plan a Checkpoint-Preserving Update
Compare pause, restart, apply, and delete behavior before changing a streaming pipeline.
Triage Pipeline Log Errors
Analyze a limited log sample for authentication, connectivity, storage, configuration, and resource problems.
Understand Batch Job Redeployment
Review job-mode lifecycle restrictions and cleanup behavior before planning another batch run.
これらのプロンプトを試す
Understand Pipeline States
Explain running, paused, stopped, error, and completed states in Goldsky Turbo. Compare streaming pipelines with job-mode pipelines.
Choose a Safe Lifecycle Operation
Compare pause, restart, apply, and delete for my streaming pipeline. Explain checkpoint effects. Ask for its name before proposing commands.
Interpret Sanitized Logs
Analyze this sanitized Turbo log sample using the bundled error catalog. Separate matched errors, possible causes, and unverified hypotheses. Do not execute repairs.
Plan a Controlled Job Redeployment
Plan redeployment of my completed job-mode pipeline. Verify cleanup status, checkpoint consequences, and sink replay risks. Require approval before deletion or applying changes.
ベストプラクティス
Confirm the project, pipeline name, mode, and checkpoint consequences before approving any lifecycle change.
Use limited, sanitized log samples and protect credentials from shell history, process arguments, and shared transcripts.
Treat pattern matches as investigation leads, and verify causes before changing resources, secrets, network settings, or pipeline configuration.
回避
Deleting or clearing pipeline state as a routine first troubleshooting step without reviewing replay consequences.
Treating an absence of matched errors as proof that a pipeline is healthy.
Copying real passwords into connection URLs, CLI arguments, or shared diagnostic prompts.
よくある質問
Which AI tools can use this skill?
The skill is listed for Claude, Codex, and Claude Code. Executing the helper also requires a Bash-compatible environment.
Does the helper need live Goldsky access?
Only when fetching logs by pipeline name. It can also analyze supplied logs through standard input without fetching them.
Does deleting a pipeline remove sink data?
The reference states that sink data remains, but pipeline checkpoints are permanently removed. Recreating the same name does not recover them.
Can job-mode pipelines pause or restart?
No. The reference describes job-mode pipelines as bounded runs that require deletion before redeployment, or waiting for automatic cleanup.
Does log analysis automatically repair problems?
No. The helper prints matched issues, recommendations, and health indicators. It does not update secrets, change resources, or repair pipelines.
What should I remove before sharing logs?
Remove passwords, tokens, connection strings, and sensitive records. Avoid credential-bearing command arguments because shell history and process listings can expose them.