Agent Skills
› rcarmo/piclaw
› extension-design
extension-design
GitHub指导安全设计与审计 Pi 扩展，禁止引用工作区源码，强制使用已安装包的 dist 路径以防重载失效。提供安全检查清单、快速审计命令及骨架更新方法，确保扩展稳定性与兼容性。
Trigger Scenarios
创建新的 Pi 扩展
审查现有 Pi 扩展代码
修复扩展因路径漂移导致的导入失败问题
Install
npx skills add rcarmo/piclaw --skill extension-design -g -y
SKILL.md
Frontmatter
{
"name": "extension-design",
"description": "Design and audit Pi extensions safely (avoid workspace source imports).",
"distribution": "public"
}
Extension design notes
Use this skill when creating or reviewing extensions so imports keep working after reloads.
Avoid this pattern
Do not import from the workspace source tree (for example /workspace/piclaw/runtime/src/... or /workspace/.../node_modules).
The running agent uses the installed package. Workspace paths can drift or break after reloads.
Use the installed package instead
Reference the installed dist paths, for example:
import { createBatchExecTool } from "/home/agent/.bun/install/global/node_modules/piclaw/dist/tools/context-tools.js";
Safety checklist
- Use installed dist paths (not workspace source).
- Avoid touching the DB before init.
- Wrap tool handlers in
try/catchto avoid crashes. - Guard filesystem access and
saveToolOutputcalls. - Keep dependencies minimal and explicit.
Quick audit
rg -n "/workspace/piclaw/runtime/src|/workspace/.*/node_modules" /workspace/.pi/extensions
Update skel when changing extensions
cp /workspace/.pi/extensions/<name>.ts /workspace/piclaw/skel/.pi/extensions/<name>.ts
Version History
- 5fa0ce5 Current 2026-07-25 10:25
