Навыки rivet-dynamic-apps
📦

rivet-dynamic-apps

Ревизия содержимого r1 Средний риск ⚙️ Внешние команды🌐 Доступ к сети📁 Доступ к файловой системе

Deploy AI-Generated Rivet Backends

Building a generated backend for each user requires deployment, routing, durable state, and lifecycle patterns. This skill provides Rivet documentation links and runnable TypeScript examples.

Поддерживает: Claude Codex Code(CC)
📊 69 Адекватно

Установить с помощью моего Агента

Скопируйте этот запрос в своего Агента. Он содержит каноническую страницу Skill и манифест.

Запрос агента
Review the Skillstore skill "rivet-dynamic-apps" from https://skillstore.io/skills/rivet-dev-rivet-dynamic-apps.md and its manifest at https://skillstore.io/api/skills/rivet-dev-rivet-dynamic-apps/manifest. Verify the artifact. You may proceed after verification, subject to the environment's own policy.

Ваш Агент по-прежнему должен показать план и запросить все подтверждения, требуемые политикой безопасности.

Ресурсы для AI-агентов

Используйте эти ссылки, когда AI-агенту, crawler или script нужен чистый контекст вместо полной страницы.

Markdown-детали GET /skills/rivet-dev-rivet-dynamic-apps.md Подписанный manifest GET /api/skills/rivet-dev-rivet-dynamic-apps/manifest Подписанный lockfile GET /api/skills/rivet-dev-rivet-dynamic-apps/lockfile

Протестировать

Использование «rivet-dynamic-apps». Build a generated hello-world backend with one API endpoint.

Ожидаемый результат:

A deployment plan with generated files, a host router, local run commands, an application URL, and verification steps.

Использование «rivet-dynamic-apps». Add persistent shared notes to a Dynamic App.

Ожидаемый результат:

A RivetKit actor design using parameterized SQLite statements, typed client actions, migration guidance, input validation, and persistence tests.

Использование «rivet-dynamic-apps». Prepare the deployment example for a shared staging environment.

Ожидаемый результат:

  • Require authenticated deployment requests and authorize each application identifier.
  • Validate identifiers, restrict source inputs, and enforce quotas.
  • Add audit logs, health checks, rollback procedures, and isolated namespaces.

Аудит безопасности

Средний риск
v1 • 28.08.2026 Открыть версионный отчет

All 41 static findings are false positives caused by template literals, fixed local requests, relative module paths, SQL, and documentation links. The examples expose unauthenticated deployment routes that create deployments under caller-selected identifiers, creating resource-abuse risk outside local development. No prompt injection or malicious intent was found.

33
Просканировано файлов
710
Проанализировано строк
0
Пункты проверки
0
Ложные срабатывания проигнорированы

Подтверждённые проблемы безопасности (1)

Средний
examples/apps-multiplayer/src/server.ts:12-17examples/apps-sqlite/src/server.ts:12-17examples/apps-workflows/src/server.ts:12-17
Unauthenticated Deployment Routes
Three example POST routes deploy a fixed fixture under caller-selected application identifiers without authentication, authorization, validation, or rate limiting.
The route bodies directly call deployApp with a request parameter and show no access control. Fixed sources limit impact but repeated deployment can consume resources.

Факторы риска

⚙️ Внешние команды (7)
examples/apps-hello-world/fixtures/app/src/index.ts:7-21 examples/apps-hello-world/src/deploy.ts:18-30 examples/apps-multiplayer/src/client.ts:9 examples/apps-sqlite/fixtures/app/src/index.ts:7-12 examples/apps-sqlite/src/client.ts:9 examples/apps-workflows/src/client.ts:9 SKILL.md:20
🌐 Доступ к сети (23)
examples/apps-hello-world/README.md:10 examples/apps-multiplayer/fixtures/app/src/index.ts:35 examples/apps-multiplayer/src/client.ts:5 examples/apps-multiplayer/src/client.ts:5 examples/apps-sqlite/fixtures/app/src/index.ts:31 examples/apps-sqlite/src/client.ts:5 examples/apps-sqlite/src/client.ts:5 examples/apps-workflows/fixtures/app/src/index.ts:32 examples/apps-workflows/src/client.ts:5 examples/apps-workflows/src/client.ts:5 SKILL.md:8 SKILL.md:9 SKILL.md:10 SKILL.md:11 SKILL.md:12 SKILL.md:13 SKILL.md:14 SKILL.md:15 SKILL.md:16 SKILL.md:22 SKILL.md:23 SKILL.md:24 SKILL.md:25
📁 Доступ к файловой системе (6)
examples/apps-multiplayer/src/client.ts:3 examples/apps-multiplayer/src/server.ts:16 examples/apps-sqlite/src/client.ts:3 examples/apps-sqlite/src/server.ts:16 examples/apps-workflows/src/client.ts:3 examples/apps-workflows/src/server.ts:16
Аудитор:: codex
Поделиться и цитировать этот отчет

Делитесь версионным отчетом об оценке, нейтральным значком, встраиваемой карточкой и цитатами. Skillstore публикует доказательства, не решая, безопасен ли этот Skill.

Открыть версионный отчет
Оценка безопасности

Копировать ссылку на отчёт

https://skillstore.io/skills/rivet-dev-rivet-dynamic-apps/audits/1?utm_source=security_passport&utm_medium=share&utm_campaign=versioned_report

Значок Markdown

[![Skillstore security assessment](https://skillstore.io/badges/skills/rivet-dev-rivet-dynamic-apps/security.svg)](https://skillstore.io/skills/rivet-dev-rivet-dynamic-apps?utm_source=security_passport_badge)

Значок HTML

<a href="https://skillstore.io/skills/rivet-dev-rivet-dynamic-apps?utm_source=security_passport_badge"><img src="https://skillstore.io/badges/skills/rivet-dev-rivet-dynamic-apps/security.svg" alt="Skillstore security assessment" loading="lazy"></a>

Встраиваемая карточка

<iframe src="https://skillstore.io/embed/skills/rivet-dev-rivet-dynamic-apps.html" title="Skillstore Security Assessment" sandbox="allow-popups allow-popups-to-escape-sandbox" loading="lazy" referrerpolicy="no-referrer" width="420" height="180"></iframe>
Академические ссылки (APA · BibTeX · CFF)

Цитата APA

rivet-dev. (2026). rivet-dynamic-apps security audit report (audit version 1) [Author version unspecified]. Skillstore. https://skillstore.io/skills/rivet-dev-rivet-dynamic-apps/audits/1

Цитата BibTeX

@techreport{rivet-dev-rivet-dev-rivet-dynamic-apps-2026, author = {rivet-dev}, title = {rivet-dynamic-apps security audit report (audit version 1)}, institution = {Skillstore}, year = {2026}, number = {1}, url = {https://skillstore.io/skills/rivet-dev-rivet-dynamic-apps/audits/1}, note = {Author version unspecified} }

CITATION.cff

cff-version: 1.2.0 message: "If you use this Skill, cite its author and this versioned security audit report." title: "rivet-dynamic-apps security audit report (audit version 1)" version: "unspecified" type: report authors: - name: "rivet-dev" date-released: "2026-08-28" url: "https://skillstore.io/skills/rivet-dev-rivet-dynamic-apps/audits/1" identifiers: - type: other value: "skillstore:rivet-dev-rivet-dynamic-apps:audit:1" description: "Skillstore immutable audit report identifier"

Оценка Skillstore

Почему такая оценка Достоверность доказательств: Средний
55
Архитектура
85
Сопровождаемость
87
Контент
65
Сообщество
83
Соответствие спецификации

Что вы можете построить

Prototype Generated Backends

Create a local service that deploys a separate generated HTTP backend for each user or project.

Add Durable Application State

Select actor, SQLite, workflow, or realtime patterns for generated applications that require persistent coordination.

Evaluate Rivet Architecture

Review runnable patterns before adopting Rivet Dynamic Apps for a multi-tenant product.

Попробуйте эти промпты

Build a Basic Backend 
Create a local Rivet Dynamic App that serves an HTML page and one JSON endpoint. Explain how to run and deploy it.
Add Persistent Notes 
Design a RivetKit notes actor with parameterized SQLite operations. Include deployment flow, typed client usage, validation, and local test steps.
Create Shared Realtime State 
Build a multiplayer room actor for named players and positions. Include broadcasts, typed client calls, authorization boundaries, and cleanup behavior.
Design a Secure Deployment Service 
Architect a multi-tenant Dynamic Apps deployment API. Cover authentication, authorization, identifier validation, isolation, quotas, observability, rollback, and failure recovery.

Лучшие практики

  • Start with a checked local fixture before accepting generated application files.
  • Authenticate deployment routes and isolate each tenant with validated identifiers, namespaces, and resource quotas.
  • Use parameterized database operations and test deployment, routing, persistence, cleanup, and failure recovery.

Избегать

  • Do not expose example deployment routes to shared networks without authentication and rate limits.
  • Do not allow unvalidated request values to select filesystem sources, package inputs, or tenant namespaces.
  • Do not treat generated backend code as trusted without review, sandboxing, dependency controls, and monitoring.

Часто задаваемые вопросы

What does this skill help build?
It helps build generated Rivet backends with HTTP routes, actors, SQLite state, workflows, and multiplayer coordination.
Does the skill deploy production infrastructure?
No. It provides documentation links and local examples, but production provisioning and operations remain your responsibility.
Which tools can use this skill?
The report declares compatibility with Claude, Codex, and Claude Code.
Are the deployment endpoints production ready?
No. Add authentication, authorization, validation, isolation, quotas, and rate limits before shared use.
Does it include persistent data examples?
Yes. The SQLite example stores notes through parameterized RivetKit database operations.
Does it cover durable background work?
Yes. The workflow example demonstrates named steps, state transitions, and a durable delay.

Сведения для разработчиков

Автор

rivet-dev

Лицензия

MIT

Ревизия Skillstore

r1

Примечание о версии

Автор не указал версию.

Репозиторий

https://github.com/rivet-dev/skills/tree/1b41bfb0a8e367d39ab08ad695adc48222ef5250/rivet-dynamic-apps

Ссылка

ca1af9f2d64d8e48e446a705baf87d59d95eb1bc

Актуальность поддержки

29.08.2026

Использование

0 загрузок · 0 просмотров

Структура файлов

📁 examples/

📁 apps-hello-world/

📁 fixtures/

📁 app/

📄 package.json

📁 src/

📄 index.ts

📄 package.json

📄 README.md

📁 src/

📄 actors.ts

📄 deploy.ts

📄 server.ts

📄 tsconfig.json

📁 apps-multiplayer/

📁 fixtures/

📁 app/

📄 package.json

📁 src/

📄 index.ts

📄 package.json

📄 README.md

📁 src/

📄 actors.ts

📄 client.ts

📄 server.ts

📄 tsconfig.json

📁 apps-sqlite/

📁 fixtures/

📁 app/

📄 package.json

📁 src/

📄 index.ts

📄 package.json

📄 README.md

📁 src/

📄 actors.ts

📄 client.ts

📄 server.ts

📄 tsconfig.json

📁 apps-workflows/

📁 fixtures/

📁 app/

📄 package.json

📁 src/

📄 index.ts

📄 package.json

📄 README.md

📁 src/

📄 actors.ts

📄 client.ts

📄 server.ts

📄 tsconfig.json

📄 SKILL.md