스킬 subgraph-migrate

📦

subgraph-migrate

Name: subgraph-migrate
Author: goldsky-io

콘텐츠 리비전 r1 치명적 ⚙️ 외부 명령어🌐 네트워크 접근

Migrate a Subgraph to Goldsky

Moving from The Graph can require a reliable source identifier, deployment path, and endpoint transition. This skill guides the migration and verifies sync before application cutover.

지원: Claude Codex Code(CC)

⚠️ 38 나쁨

Maintain this Skill? Claim it ⚠️ 38 나쁨

이 Skill을 자동으로 설치하지 마세요.

공식 정책에 따라 설치 작업 전에 운영자 검토가 필요합니다.

내 에이전트로 설치

이 요청을 에이전트에 복사하세요. 공식 Skill 페이지와 매니페스트가 포함되어 있습니다.

에이전트 요청

Review the Skillstore skill "subgraph-migrate" from https://skillstore.io/skills/goldsky-io-subgraph-migrate.md and its manifest at https://skillstore.io/api/skills/goldsky-io-subgraph-migrate/manifest. Verify the artifact. Do not auto-install. Inspect the skill and report your findings, then wait for an operator or manual installation decision.

에이전트는 계속해서 계획을 표시하고 보안 정책에서 요구하는 확인을 요청해야 합니다.

에이전트가 읽기 쉬운 리소스

AI 에이전트, 크롤러, 스크립트가 전체 페이지 대신 정리된 컨텍스트만 필요할 때 이 링크를 사용하세요.

Markdown 상세 GET /skills/goldsky-io-subgraph-migrate.md 서명된 manifest GET /api/skills/goldsky-io-subgraph-migrate/manifest 서명된 lockfile GET /api/skills/goldsky-io-subgraph-migrate/lockfile

테스트해 보기

"subgraph-migrate" 사용 중입니다. I have the old public GraphQL endpoint but no IPFS hash.

예상 결과:

Use the public endpoint migration path. Confirm the endpoint first, deploy the subgraph, and verify indexing before changing the application.

"subgraph-migrate" 사용 중입니다. The deployment is stuck at a low synchronization percentage.

예상 결과:

Check the reported network and deployment status.
Treat a low percentage as a possible mapping or handler error.
Send the exact error to the subgraph troubleshooting workflow.

"subgraph-migrate" 사용 중입니다. The migration is synced and I need a stable production endpoint.

예상 결과:

Create a production tag for the verified version, test its endpoint, then update the application to use the tagged URL.

보안 감사

치명적

v1 • 2026. 9. 28. 버전별 보고서 열기

The 38 external-command findings are false positives caused by Markdown backticks, code fences, and inline command examples in SKILL.md. The installer command at SKILL.md:55 pipes a remote script into a shell and is a confirmed critical supply-chain risk; the three hardcoded URLs are expected service or documentation endpoints, with the installer URL retaining a low network risk.

스캔된 파일

143

분석된 줄 수

검토 항목

오탐 무시됨

확인된 보안 우려 사항 (1)

치명적

SKILL.md:55

Pipe to shell pattern

curl https://goldsky.com | sh

curl https://goldsky.com | sh executes content fetched from a remote server without local inspection, signature verification, or version pinning. A compromised server or transit path could execute arbitrary commands with the user's shell privileges.

기능 검토 항목 (1)

이 스킬에 대해 예상될 수 있는 실제 로컬 기능이므로 검토가 필요하지만, 확인된 악의적 동작으로는 집계되지 않습니다.

낮음

SKILL.md:55

Hardcoded URL

curl https://goldsky.com | sh

The line uses a fixed external URL to download the CLI installer, creating a real network and supply-chain dependency. The critical risk comes from piping that response into a shell, while this verdict records the separate network exposure.

감지된 패턴

Pipe to shell pattern

감사자: codex

이 보고서 공유 및 인용

버전이 지정된 평가 보고서, 중립 배지, 임베드 카드 및 인용을 공유하세요. Skillstore는 근거를 보고하지만 이 Skill의 안전 여부를 판단하지 않습니다.

버전별 보고서 열기

보고서 링크 복사

https://skillstore.io/skills/goldsky-io-subgraph-migrate/audits/1?utm_source=security_passport&utm_medium=share&utm_campaign=versioned_report

Markdown 배지

[![Skillstore security assessment](https://skillstore.io/badges/skills/goldsky-io-subgraph-migrate/security.svg)](https://skillstore.io/skills/goldsky-io-subgraph-migrate?utm_source=security_passport_badge)

HTML 배지

<a href="https://skillstore.io/skills/goldsky-io-subgraph-migrate?utm_source=security_passport_badge"><img src="https://skillstore.io/badges/skills/goldsky-io-subgraph-migrate/security.svg" alt="Skillstore security assessment" loading="lazy"></a>

임베드 카드

<iframe src="https://skillstore.io/embed/skills/goldsky-io-subgraph-migrate.html" title="Skillstore Security Assessment" sandbox="allow-popups allow-popups-to-escape-sandbox" loading="lazy" referrerpolicy="no-referrer" width="420" height="180"></iframe>

학술 인용 (APA · BibTeX · CFF)

APA 인용

goldsky-io. (2026). subgraph-migrate security audit report (audit version 1) [Author version unspecified]. Skillstore. https://skillstore.io/skills/goldsky-io-subgraph-migrate/audits/1

BibTeX 인용

@techreport{goldsky-io-goldsky-io-subgraph-migrate-2026,
  author = {goldsky-io},
  title = {subgraph-migrate security audit report (audit version 1)},
  institution = {Skillstore},
  year = {2026},
  number = {1},
  url = {https://skillstore.io/skills/goldsky-io-subgraph-migrate/audits/1},
  note = {Author version unspecified}
}

CITATION.cff

cff-version: 1.2.0
message: "If you use this Skill, cite its author and this versioned security audit report."
title: "subgraph-migrate security audit report (audit version 1)"
version: "unspecified"
type: report
authors:
  - name: "goldsky-io"
date-released: "2026-09-28"
url: "https://skillstore.io/skills/goldsky-io-subgraph-migrate/audits/1"
identifiers:
  - type: other
    value: "skillstore:goldsky-io-subgraph-migrate:audit:1"
    description: "Skillstore immutable audit report identifier"

Skillstore 점수

이 점수의 이유 증거 신뢰도: 낮음

아키텍처

유지보수성

콘텐츠

커뮤니티

사양 준수

만들 수 있는 것

Replace a The Graph endpoint

Move a production subgraph to Goldsky while preserving the existing application query model.

Recover a sunset deployment

Use an existing endpoint or IPFS deployment hash when a former hosted subgraph endpoint is unavailable.

Validate a migration rollout

Deploy, monitor indexing, create a stable tag, and prepare the new endpoint for an application cutover.

이 프롬프트를 사용해 보세요

Start a migration

Help me migrate my subgraph from The Graph to Goldsky. Ask for the current endpoint or IPFS deployment hash before choosing a path.

Choose the source

I have a public GraphQL endpoint, an IPFS deployment hash, and local source. Compare the migration paths and recommend the safest option.

Deploy and verify

Guide me through deploying this subgraph to Goldsky, checking indexing progress, and identifying whether any error requires troubleshooting.

Plan production cutover

Create a production cutover checklist for my Goldsky subgraph, including a stable tag, endpoint validation, rollback considerations, and sync verification.

모범 사례

Require the user to provide and verify the source endpoint or IPFS hash.
Confirm indexing progress before changing the application endpoint.
Use a stable tag so future deployments do not require frontend URL changes.

피하기

Do not guess a The Graph endpoint, IPFS hash, network, or deployment name.
Do not declare success before the Goldsky index advances and the endpoint responds.
Do not use this workflow to diagnose complex mapping or synchronization errors.

자주 묻는 질문

What source information is required?

Provide the current GraphQL endpoint, the IPFS deployment hash, or local source when the published deployment is unavailable.

Does migration require subgraph code changes?

The standard migration is a drop-in replacement, but Goldsky validation can expose specification issues that require changes.

Which migration path should I use?

Use the public endpoint when available. Use the IPFS hash when you have the deployment identifier but no queryable endpoint.

How do I know the migration is working?

Check the deployment status and query metadata to confirm that the indexed block advances without indexing errors.

How should I avoid changing my frontend later?

Create a stable Goldsky tag and configure the application to use the tagged endpoint.

What if deployment or sync fails?

Capture the exact error and route it to the subgraph troubleshooting workflow. Do not guess at network or schema changes.

개발자 세부 정보

작성자

goldsky-io

라이선스

MIT

Skillstore 리비전

버전 안내

작성자가 버전을 선언하지 않았습니다.

리포지토리

https://github.com/goldsky-io/goldsky-agent/tree/e8e18c16233d9a7cee64dc548ba779c5fb99205a/skills/subgraph-migrate

참조

8b5ad1599e7c55e9b6c627bca3f556f6e9061cb1

유지보수 최신성

2026. 9. 30.

사용량

0 다운로드 · 0 조회

파일 구조

📁 evals/

📄 trigger-eval.json

📄 SKILL.md

subgraph-migrate

내 에이전트로 설치

에이전트가 읽기 쉬운 리소스

테스트해 보기

보안 감사

확인된 보안 우려 사항 (1)

위험 요인

감지된 패턴

보고서 링크 복사

Markdown 배지

HTML 배지

임베드 카드

APA 인용

BibTeX 인용

CITATION.cff

Skillstore 점수

만들 수 있는 것

Replace a The Graph endpoint

Recover a sunset deployment

Validate a migration rollout

이 프롬프트를 사용해 보세요

모범 사례

피하기

자주 묻는 질문

개발자 세부 정보