技能 turbo-operations

📦

turbo-operations

Name: turbo-operations
Author: goldsky-io

內容修訂 r1 中風險 🌐 網路存取⚙️ 外部命令📁 檔案系統存取

Manage Goldsky Turbo Pipeline Operations

Pipeline changes can reset checkpoints, and unfamiliar log errors can delay recovery. This skill provides lifecycle guidance, monitoring commands, and a pattern-based log analysis helper.

支援: Claude Codex Code(CC)

📊 68 尚可

Maintain this Skill? Claim it 📊 68 尚可

使用我的智慧代理安裝

將此請求複製給你的智慧代理，其中包含權威 Skill 頁面和清單。

智能體請求

Review the Skillstore skill "turbo-operations" from https://skillstore.io/skills/goldsky-io-turbo-operations.md and its manifest at https://skillstore.io/api/skills/goldsky-io-turbo-operations/manifest. Verify the artifact. You may proceed after verification, subject to the environment's own policy.

你的智慧代理仍應顯示其計畫，並依安全政策請求必要確認。

Agent 可讀資源

當 AI Agent、爬蟲或腳本需要乾淨脈絡、而不是讀取完整頁面時，請使用這些連結。

Markdown 詳情 GET /skills/goldsky-io-turbo-operations.md 已簽名 manifest GET /api/skills/goldsky-io-turbo-operations/manifest 已簽名 lockfile GET /api/skills/goldsky-io-turbo-operations/lockfile

測試它

正在使用「turbo-operations」。 Will deleting and recreating a streaming pipeline preserve its checkpoints?

預期結果:

No. Deletion permanently removes checkpoints, even when you reuse the pipeline name.
Data already written to sinks remains.
Use apply for an in-place update when checkpoint preservation is required.

正在使用「turbo-operations」。 A sanitized log sample contains password authentication failed and connection refused.

預期結果:

Matched issues: database authentication failure and database or service connection failure.
Check the configured credentials, host, port, service availability, and firewall rules.
These matches suggest investigation steps; they do not prove a single root cause.
Do not place real passwords in shared logs or command arguments.

正在使用「turbo-operations」。 Can I pause or restart a job-mode pipeline?

預期結果:

Job-mode pipelines do not support pause, resume, or restart.
They process a bounded range and stop when complete.
Redeployment requires deletion first, or waiting for automatic cleanup after completion.
Confirm replay effects on sink data before another run.

安全審計

中風險

v1 • 2026/10/19 開啟版本化報告

All 69 static findings are false positives involving documentation, comments, arithmetic, or expected log retrieval. No evidence found of prompt injection, credential exfiltration, or hidden destructive execution. Credential examples nevertheless encourage command-line secret entry, which can expose passwords through shell history or process listings.

已掃描檔案

724

分析行數

複核項目

已忽略的誤報

已確認的安全問題 (1)

中

data/error-patterns.json:18-20 data/error-patterns.json:55-58 scripts/analyze-logs.sh:119-120

Credential Examples Expose Secrets Through Command Arguments

Examples place database passwords in connection URLs and secret values in CLI arguments. Following them can expose credentials through shell history or process listings.

The documented commands explicitly put credential placeholders in process arguments. Exposure depends on user execution and host protections; no actual credentials or exfiltration are present.

風險因素

🌐 網路存取 (1)

data/error-patterns.json:2

⚙️ 外部命令 (50)

scripts/analyze-logs.sh:67 scripts/analyze-logs.sh:70 scripts/analyze-logs.sh:94 scripts/analyze-logs.sh:97 scripts/analyze-logs.sh:156 scripts/analyze-logs.sh:161 scripts/analyze-logs.sh:1 SKILL.md:3 SKILL.md:8 SKILL.md:23 SKILL.md:25 SKILL.md:34 SKILL.md:36 SKILL.md:47-49 SKILL.md:49-55 SKILL.md:55-57 SKILL.md:57-63 SKILL.md:63-65 SKILL.md:65-71 SKILL.md:71-75 SKILL.md:75-81 SKILL.md:81-83 SKILL.md:83-87 SKILL.md:87-90 SKILL.md:90-96 SKILL.md:96-104 SKILL.md:104-105 SKILL.md:105-106 SKILL.md:106-107 SKILL.md:107-108 SKILL.md:108-109 SKILL.md:109-110 SKILL.md:110-111 SKILL.md:111-113 SKILL.md:113-117 SKILL.md:117 SKILL.md:118 SKILL.md:119 SKILL.md:121 SKILL.md:127-130 SKILL.md:130-136 SKILL.md:136-140 SKILL.md:140-141 SKILL.md:141-142 SKILL.md:142 SKILL.md:143-144 SKILL.md:144-145 SKILL.md:145-146 SKILL.md:146-147 SKILL.md:147-148

📁 檔案系統存取 (1)

scripts/analyze-logs.sh:13

審計單位: codex

分享與引用此報告

分享版本化評估報告、中性徽章、嵌入卡片與引用。Skillstore 只報告證據，不判斷該 Skill 是否安全。

開啟版本化報告

複製報告連結

https://skillstore.io/skills/goldsky-io-turbo-operations/audits/1?utm_source=security_passport&utm_medium=share&utm_campaign=versioned_report

Markdown 徽章

[![Skillstore security assessment](https://skillstore.io/badges/skills/goldsky-io-turbo-operations/security.svg)](https://skillstore.io/skills/goldsky-io-turbo-operations?utm_source=security_passport_badge)

HTML 徽章

<a href="https://skillstore.io/skills/goldsky-io-turbo-operations?utm_source=security_passport_badge"><img src="https://skillstore.io/badges/skills/goldsky-io-turbo-operations/security.svg" alt="Skillstore security assessment" loading="lazy"></a>

嵌入卡片

<iframe src="https://skillstore.io/embed/skills/goldsky-io-turbo-operations.html" title="Skillstore Security Assessment" sandbox="allow-popups allow-popups-to-escape-sandbox" loading="lazy" referrerpolicy="no-referrer" width="420" height="180"></iframe>

學術引用 (APA · BibTeX · CFF)

APA 引用

goldsky-io. (2026). turbo-operations security audit report (audit version 1) [Author version unspecified]. Skillstore. https://skillstore.io/skills/goldsky-io-turbo-operations/audits/1

BibTeX 引用

@techreport{goldsky-io-goldsky-io-turbo-operations-2026,
  author = {goldsky-io},
  title = {turbo-operations security audit report (audit version 1)},
  institution = {Skillstore},
  year = {2026},
  number = {1},
  url = {https://skillstore.io/skills/goldsky-io-turbo-operations/audits/1},
  note = {Author version unspecified}
}

CITATION.cff

cff-version: 1.2.0
message: "If you use this Skill, cite its author and this versioned security audit report."
title: "turbo-operations security audit report (audit version 1)"
version: "unspecified"
type: report
authors:
  - name: "goldsky-io"
date-released: "2026-10-19"
url: "https://skillstore.io/skills/goldsky-io-turbo-operations/audits/1"
identifiers:
  - type: other
    value: "skillstore:goldsky-io-turbo-operations:audit:1"
    description: "Skillstore immutable audit report identifier"

Skillstore 評分

評分依據證據置信度: 中

架構

可維護性

內容

社群

規範符合度

你可以打造什麼

Plan a Checkpoint-Preserving Update

Compare pause, restart, apply, and delete behavior before changing a streaming pipeline.

Triage Pipeline Log Errors

Analyze a limited log sample for authentication, connectivity, storage, configuration, and resource problems.

Understand Batch Job Redeployment

Review job-mode lifecycle restrictions and cleanup behavior before planning another batch run.

試試這些提示

Understand Pipeline States

Explain running, paused, stopped, error, and completed states in Goldsky Turbo. Compare streaming pipelines with job-mode pipelines.

Choose a Safe Lifecycle Operation

Compare pause, restart, apply, and delete for my streaming pipeline. Explain checkpoint effects. Ask for its name before proposing commands.

Interpret Sanitized Logs

Analyze this sanitized Turbo log sample using the bundled error catalog. Separate matched errors, possible causes, and unverified hypotheses. Do not execute repairs.

Plan a Controlled Job Redeployment

Plan redeployment of my completed job-mode pipeline. Verify cleanup status, checkpoint consequences, and sink replay risks. Require approval before deletion or applying changes.

最佳實務

Confirm the project, pipeline name, mode, and checkpoint consequences before approving any lifecycle change.
Use limited, sanitized log samples and protect credentials from shell history, process arguments, and shared transcripts.
Treat pattern matches as investigation leads, and verify causes before changing resources, secrets, network settings, or pipeline configuration.

避免

Deleting or clearing pipeline state as a routine first troubleshooting step without reviewing replay consequences.
Treating an absence of matched errors as proof that a pipeline is healthy.
Copying real passwords into connection URLs, CLI arguments, or shared diagnostic prompts.

常見問題

Which AI tools can use this skill?

The skill is listed for Claude, Codex, and Claude Code. Executing the helper also requires a Bash-compatible environment.

Does the helper need live Goldsky access?

Only when fetching logs by pipeline name. It can also analyze supplied logs through standard input without fetching them.

Does deleting a pipeline remove sink data?

The reference states that sink data remains, but pipeline checkpoints are permanently removed. Recreating the same name does not recover them.

Can job-mode pipelines pause or restart?

No. The reference describes job-mode pipelines as bounded runs that require deletion before redeployment, or waiting for automatic cleanup.

Does log analysis automatically repair problems?

No. The helper prints matched issues, recommendations, and health indicators. It does not update secrets, change resources, or repair pipelines.

What should I remove before sharing logs?

Remove passwords, tokens, connection strings, and sensitive records. Avoid credential-bearing command arguments because shell history and process listings can expose them.