技能 rivet-dynamic-apps
📦

rivet-dynamic-apps

內容修訂 r1 中風險 ⚙️ 外部命令🌐 網路存取📁 檔案系統存取

Deploy AI-Generated Rivet Backends

Building a generated backend for each user requires deployment, routing, durable state, and lifecycle patterns. This skill provides Rivet documentation links and runnable TypeScript examples.

支援: Claude Codex Code(CC)
Maintain this Skill? Claim it 📊 69 尚可

使用我的智慧代理安裝

將此請求複製給你的智慧代理，其中包含權威 Skill 頁面和清單。

智能體請求
Review the Skillstore skill "rivet-dynamic-apps" from https://skillstore.io/skills/rivet-dev-rivet-dynamic-apps.md and its manifest at https://skillstore.io/api/skills/rivet-dev-rivet-dynamic-apps/manifest. Verify the artifact. You may proceed after verification, subject to the environment's own policy.

你的智慧代理仍應顯示其計畫，並依安全政策請求必要確認。

Agent 可讀資源

當 AI Agent、爬蟲或腳本需要乾淨脈絡、而不是讀取完整頁面時，請使用這些連結。

Markdown 詳情 GET /skills/rivet-dev-rivet-dynamic-apps.md 已簽名 manifest GET /api/skills/rivet-dev-rivet-dynamic-apps/manifest 已簽名 lockfile GET /api/skills/rivet-dev-rivet-dynamic-apps/lockfile

測試它

正在使用「rivet-dynamic-apps」。 Build a generated hello-world backend with one API endpoint.

預期結果:

A deployment plan with generated files, a host router, local run commands, an application URL, and verification steps.

正在使用「rivet-dynamic-apps」。 Add persistent shared notes to a Dynamic App.

預期結果:

A RivetKit actor design using parameterized SQLite statements, typed client actions, migration guidance, input validation, and persistence tests.

正在使用「rivet-dynamic-apps」。 Prepare the deployment example for a shared staging environment.

預期結果:

  • Require authenticated deployment requests and authorize each application identifier.
  • Validate identifiers, restrict source inputs, and enforce quotas.
  • Add audit logs, health checks, rollback procedures, and isolated namespaces.

安全審計

中風險
v1 • 2026/8/28 開啟版本化報告

All 41 static findings are false positives caused by template literals, fixed local requests, relative module paths, SQL, and documentation links. The examples expose unauthenticated deployment routes that create deployments under caller-selected identifiers, creating resource-abuse risk outside local development. No prompt injection or malicious intent was found.

33
已掃描檔案
710
分析行數
0
複核項目
0
已忽略的誤報

已確認的安全問題 (1)

中
examples/apps-multiplayer/src/server.ts:12-17examples/apps-sqlite/src/server.ts:12-17examples/apps-workflows/src/server.ts:12-17
Unauthenticated Deployment Routes
Three example POST routes deploy a fixed fixture under caller-selected application identifiers without authentication, authorization, validation, or rate limiting.
The route bodies directly call deployApp with a request parameter and show no access control. Fixed sources limit impact but repeated deployment can consume resources.

風險因素

⚙️ 外部命令 (7)
examples/apps-hello-world/fixtures/app/src/index.ts:7-21 examples/apps-hello-world/src/deploy.ts:18-30 examples/apps-multiplayer/src/client.ts:9 examples/apps-sqlite/fixtures/app/src/index.ts:7-12 examples/apps-sqlite/src/client.ts:9 examples/apps-workflows/src/client.ts:9 SKILL.md:20
🌐 網路存取 (23)
examples/apps-hello-world/README.md:10 examples/apps-multiplayer/fixtures/app/src/index.ts:35 examples/apps-multiplayer/src/client.ts:5 examples/apps-multiplayer/src/client.ts:5 examples/apps-sqlite/fixtures/app/src/index.ts:31 examples/apps-sqlite/src/client.ts:5 examples/apps-sqlite/src/client.ts:5 examples/apps-workflows/fixtures/app/src/index.ts:32 examples/apps-workflows/src/client.ts:5 examples/apps-workflows/src/client.ts:5 SKILL.md:8 SKILL.md:9 SKILL.md:10 SKILL.md:11 SKILL.md:12 SKILL.md:13 SKILL.md:14 SKILL.md:15 SKILL.md:16 SKILL.md:22 SKILL.md:23 SKILL.md:24 SKILL.md:25
📁 檔案系統存取 (6)
examples/apps-multiplayer/src/client.ts:3 examples/apps-multiplayer/src/server.ts:16 examples/apps-sqlite/src/client.ts:3 examples/apps-sqlite/src/server.ts:16 examples/apps-workflows/src/client.ts:3 examples/apps-workflows/src/server.ts:16
審計單位: codex
分享與引用此報告

分享版本化評估報告、中性徽章、嵌入卡片與引用。Skillstore 只報告證據，不判斷該 Skill 是否安全。

開啟版本化報告
安全評估

複製報告連結

https://skillstore.io/skills/rivet-dev-rivet-dynamic-apps/audits/1?utm_source=security_passport&utm_medium=share&utm_campaign=versioned_report

Markdown 徽章

[![Skillstore security assessment](https://skillstore.io/badges/skills/rivet-dev-rivet-dynamic-apps/security.svg)](https://skillstore.io/skills/rivet-dev-rivet-dynamic-apps?utm_source=security_passport_badge)

HTML 徽章

<a href="https://skillstore.io/skills/rivet-dev-rivet-dynamic-apps?utm_source=security_passport_badge"><img src="https://skillstore.io/badges/skills/rivet-dev-rivet-dynamic-apps/security.svg" alt="Skillstore security assessment" loading="lazy"></a>

嵌入卡片

<iframe src="https://skillstore.io/embed/skills/rivet-dev-rivet-dynamic-apps.html" title="Skillstore Security Assessment" sandbox="allow-popups allow-popups-to-escape-sandbox" loading="lazy" referrerpolicy="no-referrer" width="420" height="180"></iframe>
學術引用 (APA · BibTeX · CFF)

APA 引用

rivet-dev. (2026). rivet-dynamic-apps security audit report (audit version 1) [Author version unspecified]. Skillstore. https://skillstore.io/skills/rivet-dev-rivet-dynamic-apps/audits/1

BibTeX 引用

@techreport{rivet-dev-rivet-dev-rivet-dynamic-apps-2026, author = {rivet-dev}, title = {rivet-dynamic-apps security audit report (audit version 1)}, institution = {Skillstore}, year = {2026}, number = {1}, url = {https://skillstore.io/skills/rivet-dev-rivet-dynamic-apps/audits/1}, note = {Author version unspecified} }

CITATION.cff

cff-version: 1.2.0 message: "If you use this Skill, cite its author and this versioned security audit report." title: "rivet-dynamic-apps security audit report (audit version 1)" version: "unspecified" type: report authors: - name: "rivet-dev" date-released: "2026-08-28" url: "https://skillstore.io/skills/rivet-dev-rivet-dynamic-apps/audits/1" identifiers: - type: other value: "skillstore:rivet-dev-rivet-dynamic-apps:audit:1" description: "Skillstore immutable audit report identifier"

Skillstore 評分

評分依據 證據置信度: 中
55
架構
85
可維護性
87
內容
65
社群
83
規範符合度

你可以打造什麼

Prototype Generated Backends

Create a local service that deploys a separate generated HTTP backend for each user or project.

Add Durable Application State

Select actor, SQLite, workflow, or realtime patterns for generated applications that require persistent coordination.

Evaluate Rivet Architecture

Review runnable patterns before adopting Rivet Dynamic Apps for a multi-tenant product.

試試這些提示

Build a Basic Backend 
Create a local Rivet Dynamic App that serves an HTML page and one JSON endpoint. Explain how to run and deploy it.
Add Persistent Notes 
Design a RivetKit notes actor with parameterized SQLite operations. Include deployment flow, typed client usage, validation, and local test steps.
Create Shared Realtime State 
Build a multiplayer room actor for named players and positions. Include broadcasts, typed client calls, authorization boundaries, and cleanup behavior.
Design a Secure Deployment Service 
Architect a multi-tenant Dynamic Apps deployment API. Cover authentication, authorization, identifier validation, isolation, quotas, observability, rollback, and failure recovery.

最佳實務

  • Start with a checked local fixture before accepting generated application files.
  • Authenticate deployment routes and isolate each tenant with validated identifiers, namespaces, and resource quotas.
  • Use parameterized database operations and test deployment, routing, persistence, cleanup, and failure recovery.

避免

  • Do not expose example deployment routes to shared networks without authentication and rate limits.
  • Do not allow unvalidated request values to select filesystem sources, package inputs, or tenant namespaces.
  • Do not treat generated backend code as trusted without review, sandboxing, dependency controls, and monitoring.

常見問題

What does this skill help build?
It helps build generated Rivet backends with HTTP routes, actors, SQLite state, workflows, and multiplayer coordination.
Does the skill deploy production infrastructure?
No. It provides documentation links and local examples, but production provisioning and operations remain your responsibility.
Which tools can use this skill?
The report declares compatibility with Claude, Codex, and Claude Code.
Are the deployment endpoints production ready?
No. Add authentication, authorization, validation, isolation, quotas, and rate limits before shared use.
Does it include persistent data examples?
Yes. The SQLite example stores notes through parameterized RivetKit database operations.
Does it cover durable background work?
Yes. The workflow example demonstrates named steps, state transitions, and a durable delay.

開發者詳細資訊

作者

rivet-dev

授權

MIT

Skillstore 修訂

r1

版本提示

作者未聲明版本。

儲存庫

https://github.com/rivet-dev/skills/tree/1b41bfb0a8e367d39ab08ad695adc48222ef5250/rivet-dynamic-apps

引用

ca1af9f2d64d8e48e446a705baf87d59d95eb1bc

維護新鮮度

2026/8/29

使用量

1 次下載 · 1 次瀏覽

檔案結構

📁 examples/

📁 apps-hello-world/

📁 fixtures/

📁 app/

📄 package.json

📁 src/

📄 index.ts

📄 package.json

📄 README.md

📁 src/

📄 actors.ts

📄 deploy.ts

📄 server.ts

📄 tsconfig.json

📁 apps-multiplayer/

📁 fixtures/

📁 app/

📄 package.json

📁 src/

📄 index.ts

📄 package.json

📄 README.md

📁 src/

📄 actors.ts

📄 client.ts

📄 server.ts

📄 tsconfig.json

📁 apps-sqlite/

📁 fixtures/

📁 app/

📄 package.json

📁 src/

📄 index.ts

📄 package.json

📄 README.md

📁 src/

📄 actors.ts

📄 client.ts

📄 server.ts

📄 tsconfig.json

📁 apps-workflows/

📁 fixtures/

📁 app/

📄 package.json

📁 src/

📄 index.ts

📄 package.json

📄 README.md

📁 src/

📄 actors.ts

📄 client.ts

📄 server.ts

📄 tsconfig.json

📄 SKILL.md