スキル rivet-dynamic-apps

📦

rivet-dynamic-apps

Name: rivet-dynamic-apps
Author: rivet-dev

コンテンツリビジョン r1 中リスク ⚙️ 外部コマンド🌐 ネットワークアクセス📁 ファイルシステムへのアクセス

Deploy AI-Generated Rivet Backends

Building a generated backend for each user requires deployment, routing, durable state, and lifecycle patterns. This skill provides Rivet documentation links and runnable TypeScript examples.

対応: Claude Codex Code(CC)

📊 69 十分

自分のエージェントでインストール

このリクエストをエージェントにコピーしてください。正規の Skill ページとマニフェストが含まれています。

エージェントリクエスト

Review the Skillstore skill "rivet-dynamic-apps" from https://skillstore.io/skills/rivet-dev-rivet-dynamic-apps.md and its manifest at https://skillstore.io/api/skills/rivet-dev-rivet-dynamic-apps/manifest. Verify the artifact. You may proceed after verification, subject to the environment's own policy.

エージェントは引き続き計画を提示し、セキュリティポリシーで必要な確認を求める必要があります。

エージェントが読めるリソース

AI エージェント、クローラー、スクリプトがページ全体ではなく整理されたコンテキストを必要とする場合は、これらのリンクを使ってください。

Markdown詳細 GET /skills/rivet-dev-rivet-dynamic-apps.md 署名済み manifest GET /api/skills/rivet-dev-rivet-dynamic-apps/manifest 署名済み lockfile GET /api/skills/rivet-dev-rivet-dynamic-apps/lockfile

テストする

「rivet-dynamic-apps」を使用しています。 Build a generated hello-world backend with one API endpoint.

期待される結果:

A deployment plan with generated files, a host router, local run commands, an application URL, and verification steps.

「rivet-dynamic-apps」を使用しています。 Add persistent shared notes to a Dynamic App.

期待される結果:

A RivetKit actor design using parameterized SQLite statements, typed client actions, migration guidance, input validation, and persistence tests.

「rivet-dynamic-apps」を使用しています。 Prepare the deployment example for a shared staging environment.

期待される結果:

Require authenticated deployment requests and authorize each application identifier.
Validate identifiers, restrict source inputs, and enforce quotas.
Add audit logs, health checks, rollback procedures, and isolated namespaces.

セキュリティ監査

中リスク

v1 • 2026/8/28 バージョン別レポートを開く

All 41 static findings are false positives caused by template literals, fixed local requests, relative module paths, SQL, and documentation links. The examples expose unauthenticated deployment routes that create deployments under caller-selected identifiers, creating resource-abuse risk outside local development. No prompt injection or malicious intent was found.

スキャンされたファイル

710

解析済み行数

レビュー項目

誤検知を無視

確認済みのセキュリティ上の懸念 (1)

中

examples/apps-multiplayer/src/server.ts:12-17 examples/apps-sqlite/src/server.ts:12-17 examples/apps-workflows/src/server.ts:12-17

Unauthenticated Deployment Routes

Three example POST routes deploy a fixed fixture under caller-selected application identifiers without authentication, authorization, validation, or rate limiting.

The route bodies directly call deployApp with a request parameter and show no access control. Fixed sources limit impact but repeated deployment can consume resources.

リスク要因

⚙️ 外部コマンド (7)

examples/apps-hello-world/fixtures/app/src/index.ts:7-21 examples/apps-hello-world/src/deploy.ts:18-30 examples/apps-multiplayer/src/client.ts:9 examples/apps-sqlite/fixtures/app/src/index.ts:7-12 examples/apps-sqlite/src/client.ts:9 examples/apps-workflows/src/client.ts:9 SKILL.md:20

🌐 ネットワークアクセス (23)

📁 ファイルシステムへのアクセス (6)

examples/apps-multiplayer/src/client.ts:3 examples/apps-multiplayer/src/server.ts:16 examples/apps-sqlite/src/client.ts:3 examples/apps-sqlite/src/server.ts:16 examples/apps-workflows/src/client.ts:3 examples/apps-workflows/src/server.ts:16

監査者: codex

このレポートを共有・引用

バージョン付き評価レポート、中立的なバッジ、埋め込みカード、引用を共有できます。Skillstore は証拠を報告しますが、この Skill が安全かどうかは判断しません。

バージョン別レポートを開く

レポートリンクをコピー

https://skillstore.io/skills/rivet-dev-rivet-dynamic-apps/audits/1?utm_source=security_passport&utm_medium=share&utm_campaign=versioned_report

Markdownバッジ

[![Skillstore security assessment](https://skillstore.io/badges/skills/rivet-dev-rivet-dynamic-apps/security.svg)](https://skillstore.io/skills/rivet-dev-rivet-dynamic-apps?utm_source=security_passport_badge)

HTMLバッジ

<a href="https://skillstore.io/skills/rivet-dev-rivet-dynamic-apps?utm_source=security_passport_badge"><img src="https://skillstore.io/badges/skills/rivet-dev-rivet-dynamic-apps/security.svg" alt="Skillstore security assessment" loading="lazy"></a>

埋め込みカード

<iframe src="https://skillstore.io/embed/skills/rivet-dev-rivet-dynamic-apps.html" title="Skillstore Security Assessment" sandbox="allow-popups allow-popups-to-escape-sandbox" loading="lazy" referrerpolicy="no-referrer" width="420" height="180"></iframe>

学術引用 (APA · BibTeX · CFF)

APA形式の引用

rivet-dev. (2026). rivet-dynamic-apps security audit report (audit version 1) [Author version unspecified]. Skillstore. https://skillstore.io/skills/rivet-dev-rivet-dynamic-apps/audits/1

BibTeX形式の引用

@techreport{rivet-dev-rivet-dev-rivet-dynamic-apps-2026,
  author = {rivet-dev},
  title = {rivet-dynamic-apps security audit report (audit version 1)},
  institution = {Skillstore},
  year = {2026},
  number = {1},
  url = {https://skillstore.io/skills/rivet-dev-rivet-dynamic-apps/audits/1},
  note = {Author version unspecified}
}

CITATION.cff

cff-version: 1.2.0
message: "If you use this Skill, cite its author and this versioned security audit report."
title: "rivet-dynamic-apps security audit report (audit version 1)"
version: "unspecified"
type: report
authors:
  - name: "rivet-dev"
date-released: "2026-08-28"
url: "https://skillstore.io/skills/rivet-dev-rivet-dynamic-apps/audits/1"
identifiers:
  - type: other
    value: "skillstore:rivet-dev-rivet-dynamic-apps:audit:1"
    description: "Skillstore immutable audit report identifier"

Skillstore スコア

このスコアの理由証拠の信頼度: 中

アーキテクチャ

保守性

コンテンツ

コミュニティ

仕様準拠

作成できるもの

Prototype Generated Backends

Create a local service that deploys a separate generated HTTP backend for each user or project.

Add Durable Application State

Select actor, SQLite, workflow, or realtime patterns for generated applications that require persistent coordination.

Evaluate Rivet Architecture

Review runnable patterns before adopting Rivet Dynamic Apps for a multi-tenant product.

これらのプロンプトを試す

Build a Basic Backend

Create a local Rivet Dynamic App that serves an HTML page and one JSON endpoint. Explain how to run and deploy it.

Add Persistent Notes

Design a RivetKit notes actor with parameterized SQLite operations. Include deployment flow, typed client usage, validation, and local test steps.

Create Shared Realtime State

Build a multiplayer room actor for named players and positions. Include broadcasts, typed client calls, authorization boundaries, and cleanup behavior.

Design a Secure Deployment Service

Architect a multi-tenant Dynamic Apps deployment API. Cover authentication, authorization, identifier validation, isolation, quotas, observability, rollback, and failure recovery.

ベストプラクティス

Start with a checked local fixture before accepting generated application files.
Authenticate deployment routes and isolate each tenant with validated identifiers, namespaces, and resource quotas.
Use parameterized database operations and test deployment, routing, persistence, cleanup, and failure recovery.

回避

Do not expose example deployment routes to shared networks without authentication and rate limits.
Do not allow unvalidated request values to select filesystem sources, package inputs, or tenant namespaces.
Do not treat generated backend code as trusted without review, sandboxing, dependency controls, and monitoring.