astrale-domain
Build and Maintain Astrale Domains
Astrale Domain development spans Schema, authorization, runtime, and deployment, which can become inconsistent. This skill guides focused changes and phased creation with explicit verification boundaries.
Установить с помощью моего Агента
Скопируйте этот запрос в своего Агента. Он содержит каноническую страницу Skill и манифест.
Review the Skillstore skill "astrale-domain" from https://skillstore.io/skills/astrale-os-astrale-domain.md and its manifest at https://skillstore.io/api/skills/astrale-os-astrale-domain/manifest. Verify the artifact. You may proceed after verification, subject to the environment's own policy.Ваш Агент по-прежнему должен показать план и запросить все подтверждения, требуемые политикой безопасности.
Ресурсы для AI-агентов
Используйте эти ссылки, когда AI-агенту, crawler или script нужен чистый контекст вместо полной страницы.
Протестировать
Использование «astrale-domain». Review a proposed Issue.close callable.
Ожидаемый результат:
- Declare the callable input, output, authentication mode, and Policy in Schema.
- Implement the admitted operation as a Workflow with named read and mutation steps.
- Guard the state transition atomically rather than trusting the earlier read.
- Test an allowed call, a Policy refusal, and a stale-state refusal.
Использование «astrale-domain». Plan an upgrade where employees depends on agencies.
Ожидаемый результат:
- Rebuild employees against the candidate agencies Schema revision.
- Deploy both candidates and verify their served release metadata.
- Install both as explicit roots in one grouped operation after approval.
- Inspect installed revisions and retained behavior; preserve operation identity if the outcome is unknown.
Использование «astrale-domain». Diagnose a callable that works as Root but fails for a user.
Ожидаемый результат:
- Confirm the installed release, callable key, and registered caller identity.
- Inspect the authenticated principal ceiling separately from caller Policy admission.
- Verify the intended caller or self session and exact Domain requirements.
- Repeat allowed and refused calls, then independently verify that refusal caused no effects.
Аудит безопасности
БезопасноAll 61 static findings are false positives in their documented context, including Markdown backticks, public discovery paths, and authorized deployment examples. Secret references configure deployment environments, and identity guidance explicitly prohibits private-key disclosure and unauthorized registration. No evidence found of prompt injection, credential exfiltration, or malicious intent in the reviewed files.
Факторы риска
📁 Доступ к файловой системе (2)
🌐 Доступ к сети (1)
⚙️ Внешние команды (34)
Поделиться и цитировать этот отчет
Делитесь версионным отчетом об оценке, нейтральным значком, встраиваемой карточкой и цитатами. Skillstore публикует доказательства, не решая, безопасен ли этот Skill.
Копировать ссылку на отчёт
https://skillstore.io/skills/astrale-os-astrale-domain/audits/1?utm_source=security_passport&utm_medium=share&utm_campaign=versioned_reportЗначок Markdown
[](https://skillstore.io/skills/astrale-os-astrale-domain?utm_source=security_passport_badge)Значок HTML
<a href="https://skillstore.io/skills/astrale-os-astrale-domain?utm_source=security_passport_badge"><img src="https://skillstore.io/badges/skills/astrale-os-astrale-domain/security.svg" alt="Skillstore security assessment" loading="lazy"></a>Встраиваемая карточка
<iframe src="https://skillstore.io/embed/skills/astrale-os-astrale-domain.html" title="Skillstore Security Assessment" sandbox="allow-popups allow-popups-to-escape-sandbox" loading="lazy" referrerpolicy="no-referrer" width="420" height="180"></iframe>Академические ссылки (APA · BibTeX · CFF)
Цитата APA
astrale-os. (2026). astrale-domain security audit report (audit version 1) [Author version unspecified]. Skillstore. https://skillstore.io/skills/astrale-os-astrale-domain/audits/1Цитата BibTeX
@techreport{astrale-os-astrale-os-astrale-domain-2026,
author = {astrale-os},
title = {astrale-domain security audit report (audit version 1)},
institution = {Skillstore},
year = {2026},
number = {1},
url = {https://skillstore.io/skills/astrale-os-astrale-domain/audits/1},
note = {Author version unspecified}
}CITATION.cff
cff-version: 1.2.0
message: "If you use this Skill, cite its author and this versioned security audit report."
title: "astrale-domain security audit report (audit version 1)"
version: "unspecified"
type: report
authors:
- name: "astrale-os"
date-released: "2026-10-10"
url: "https://skillstore.io/skills/astrale-os-astrale-domain/audits/1"
identifiers:
- type: other
value: "skillstore:astrale-os-astrale-domain:audit:1"
description: "Skillstore immutable audit report identifier"
Оценка Skillstore
Почему такая оценка Достоверность доказательств: СреднийЧто вы можете построить
Create a Business Domain
Guide an application developer through project inspection, Schema design, callable implementation, sample data, and verification.
Review Authorization Boundaries
Help a security engineer examine callable admission, caller and principal authority, group membership, and refusal evidence.
Qualify a Coordinated Release
Help a release engineer plan coherent dependency upgrades, grouped installs, rollback constraints, and installed-behavior checks.
Попробуйте эти промпты
Inspect this Astrale Domain project. Identify its Schema, runtime, environments, and verification commands. Explain missing prerequisites without deploying or changing secrets.
Add [operation] to [Class] using the installed SDK. Declare Schema-owned authorization and runtime behavior. Add allowed and refused tests without deploying.
Implement [provider operation] through an Integration and Provider. Keep secrets environment-owned. Validate responses and test effects and failure behavior without claiming exactly-once delivery.
Plan [Schema change] across affected Domains. Inspect installed revisions, design staged data migration, and specify grouped installs and rollback checks. Require approval before mutations.
Лучшие практики
- Inspect current source and installed public SDK exports before choosing API syntax.
- Keep authorization in Schema, secrets in deployment environments, and tests focused on allowed and refused behavior.
- Verify build, served release, installed revision, and live invocation separately before reporting deployment success.
Избегать
- Do not weaken authentication or add handler authorization substitutes to make a failing test pass.
- Do not put secrets in Schema, logs, test snapshots, source files, or command arguments.
- Do not install coherent dependencies sequentially or treat deployment as installation.
Часто задаваемые вопросы
What does this skill provide?
Which AI tools are supported?
Does it include the Astrale SDK or CLI?
Does deployment update an instance?
How should secrets be handled?
Can it guarantee safe migrations or exactly-once delivery?
Сведения для разработчиков
Автор
astrale-osЛицензия
MIT
Ревизия Skillstore
r1
Примечание о версии
Автор не указал версию.
Репозиторий
https://github.com/astrale-os/cli/tree/db2fc39650aa2fbd37e8439804d5e627ac83bcb0/skills/astrale-domainСсылка
e406bf64b5db6e514879399e87b346fa7ff7c2fb
Актуальность поддержки
11.10.2026
Использование
0 загрузок · 0 просмотров