스킬 astrale-domain

📦

astrale-domain

Name: astrale-domain
Author: astrale-os

콘텐츠 리비전 r1 안전 📁 파일 시스템 접근🌐 네트워크 접근⚙️ 외부 명령어

Build and Maintain Astrale Domains

Astrale Domain development spans Schema, authorization, runtime, and deployment, which can become inconsistent. This skill guides focused changes and phased creation with explicit verification boundaries.

지원: Claude Codex Code(CC)

📊 76 적절함

Maintain this Skill? Claim it 📊 76 적절함

내 에이전트로 설치

이 요청을 에이전트에 복사하세요. 공식 Skill 페이지와 매니페스트가 포함되어 있습니다.

에이전트 요청

Review the Skillstore skill "astrale-domain" from https://skillstore.io/skills/astrale-os-astrale-domain.md and its manifest at https://skillstore.io/api/skills/astrale-os-astrale-domain/manifest. Verify the artifact. You may proceed after verification, subject to the environment's own policy.

에이전트는 계속해서 계획을 표시하고 보안 정책에서 요구하는 확인을 요청해야 합니다.

에이전트가 읽기 쉬운 리소스

AI 에이전트, 크롤러, 스크립트가 전체 페이지 대신 정리된 컨텍스트만 필요할 때 이 링크를 사용하세요.

Markdown 상세 GET /skills/astrale-os-astrale-domain.md 서명된 manifest GET /api/skills/astrale-os-astrale-domain/manifest 서명된 lockfile GET /api/skills/astrale-os-astrale-domain/lockfile

테스트해 보기

"astrale-domain" 사용 중입니다. Review a proposed Issue.close callable.

예상 결과:

Declare the callable input, output, authentication mode, and Policy in Schema.
Implement the admitted operation as a Workflow with named read and mutation steps.
Guard the state transition atomically rather than trusting the earlier read.
Test an allowed call, a Policy refusal, and a stale-state refusal.

"astrale-domain" 사용 중입니다. Plan an upgrade where employees depends on agencies.

예상 결과:

Rebuild employees against the candidate agencies Schema revision.
Deploy both candidates and verify their served release metadata.
Install both as explicit roots in one grouped operation after approval.
Inspect installed revisions and retained behavior; preserve operation identity if the outcome is unknown.

"astrale-domain" 사용 중입니다. Diagnose a callable that works as Root but fails for a user.

예상 결과:

Confirm the installed release, callable key, and registered caller identity.
Inspect the authenticated principal ceiling separately from caller Policy admission.
Verify the intended caller or self session and exact Domain requirements.
Repeat allowed and refused calls, then independently verify that refusal caused no effects.

보안 감사

안전

v1 • 2026. 10. 10. 버전별 보고서 열기

All 61 static findings are false positives in their documented context, including Markdown backticks, public discovery paths, and authorized deployment examples. Secret references configure deployment environments, and identity guidance explicitly prohibits private-key disclosure and unauthorized registration. No evidence found of prompt injection, credential exfiltration, or malicious intent in the reviewed files.

스캔된 파일

1,978

분석된 줄 수

검토 항목

오탐 무시됨

위험 요인

📁 파일 시스템 접근 (2)

references/debugging.md:39 references/development.md:152

🌐 네트워크 접근 (1)

references/integrations.md:31

⚙️ 외부 명령어 (34)

가장 최근에 완료된 정적·의미론적 감사에서 확인된 보안 발견 사항이 감지되지 않았습니다. 이는 스킬에 부작용이 없음을 증명하지 않습니다.

감사자: codex

이 보고서 공유 및 인용

버전이 지정된 평가 보고서, 중립 배지, 임베드 카드 및 인용을 공유하세요. Skillstore는 근거를 보고하지만 이 Skill의 안전 여부를 판단하지 않습니다.

버전별 보고서 열기

보고서 링크 복사

https://skillstore.io/skills/astrale-os-astrale-domain/audits/1?utm_source=security_passport&utm_medium=share&utm_campaign=versioned_report

Markdown 배지

[![Skillstore security assessment](https://skillstore.io/badges/skills/astrale-os-astrale-domain/security.svg)](https://skillstore.io/skills/astrale-os-astrale-domain?utm_source=security_passport_badge)

HTML 배지

<a href="https://skillstore.io/skills/astrale-os-astrale-domain?utm_source=security_passport_badge"><img src="https://skillstore.io/badges/skills/astrale-os-astrale-domain/security.svg" alt="Skillstore security assessment" loading="lazy"></a>

임베드 카드

<iframe src="https://skillstore.io/embed/skills/astrale-os-astrale-domain.html" title="Skillstore Security Assessment" sandbox="allow-popups allow-popups-to-escape-sandbox" loading="lazy" referrerpolicy="no-referrer" width="420" height="180"></iframe>

학술 인용 (APA · BibTeX · CFF)

APA 인용

astrale-os. (2026). astrale-domain security audit report (audit version 1) [Author version unspecified]. Skillstore. https://skillstore.io/skills/astrale-os-astrale-domain/audits/1

BibTeX 인용

@techreport{astrale-os-astrale-os-astrale-domain-2026,
  author = {astrale-os},
  title = {astrale-domain security audit report (audit version 1)},
  institution = {Skillstore},
  year = {2026},
  number = {1},
  url = {https://skillstore.io/skills/astrale-os-astrale-domain/audits/1},
  note = {Author version unspecified}
}

CITATION.cff

cff-version: 1.2.0
message: "If you use this Skill, cite its author and this versioned security audit report."
title: "astrale-domain security audit report (audit version 1)"
version: "unspecified"
type: report
authors:
  - name: "astrale-os"
date-released: "2026-10-10"
url: "https://skillstore.io/skills/astrale-os-astrale-domain/audits/1"
identifiers:
  - type: other
    value: "skillstore:astrale-os-astrale-domain:audit:1"
    description: "Skillstore immutable audit report identifier"

Skillstore 점수

이 점수의 이유 증거 신뢰도: 중간

아키텍처

유지보수성

콘텐츠

커뮤니티

사양 준수

만들 수 있는 것

Create a Business Domain

Guide an application developer through project inspection, Schema design, callable implementation, sample data, and verification.

Review Authorization Boundaries

Help a security engineer examine callable admission, caller and principal authority, group membership, and refusal evidence.

Qualify a Coordinated Release

Help a release engineer plan coherent dependency upgrades, grouped installs, rollback constraints, and installed-behavior checks.

이 프롬프트를 사용해 보세요

Inspect an Existing Domain

Inspect this Astrale Domain project. Identify its Schema, runtime, environments, and verification commands. Explain missing prerequisites without deploying or changing secrets.

Add a Protected Callable

Add [operation] to [Class] using the installed SDK. Declare Schema-owned authorization and runtime behavior. Add allowed and refused tests without deploying.

Implement an External Integration

Implement [provider operation] through an Integration and Provider. Keep secrets environment-owned. Validate responses and test effects and failure behavior without claiming exactly-once delivery.

Plan a Dependency Migration

Plan [Schema change] across affected Domains. Inspect installed revisions, design staged data migration, and specify grouped installs and rollback checks. Require approval before mutations.

모범 사례

Inspect current source and installed public SDK exports before choosing API syntax.
Keep authorization in Schema, secrets in deployment environments, and tests focused on allowed and refused behavior.
Verify build, served release, installed revision, and live invocation separately before reporting deployment success.

피하기

Do not weaken authentication or add handler authorization substitutes to make a failing test pass.
Do not put secrets in Schema, logs, test snapshots, source files, or command arguments.
Do not install coherent dependencies sequentially or treat deployment as installation.

자주 묻는 질문

What does this skill provide?

It provides task-routed guidance for Astrale Domain authoring, authorization, runtime, Views, testing, migration, deployment, and debugging.

Which AI tools are supported?

The marketplace lists Claude, Codex, and Claude Code. Project execution still depends on your installed Astrale tools and permissions.

Does it include the Astrale SDK or CLI?

No. It contains Markdown instructions and references. Install compatible public SDK, CLI, and adapter packages for implementation and live verification.

Does deployment update an instance?

No. Deployment creates a release endpoint. Installation separately changes the release pinned on the chosen instance.

How should secrets be handled?

Keep secrets in their owning deployment environment. Avoid source, logs, test evidence, and command arguments. Use private files or secret-manager input.

Can it guarantee safe migrations or exactly-once delivery?

No. Migration support depends on public SDK contracts, and the inline Workflow runner does not provide durable replay or exactly-once execution.