AI 智能体 skill-marketplace 更新于 2026-08-04

Skill Marketplace 工程规则

Marketplace rules: signature verification and least-privilege installation

✓ 应当这么做

✓ Treat model and tool output as untrusted input; isolate it with explicit delimiters
✓ Authorise every tool call server-side against the authenticated principal
✓ Keep system instructions out of user-controlled prompt regions

42 篇

Vector search rules: chunking strategy, recall evaluation and index rebuild path

Feature store rules: point-in-time correctness and train/serve parity

Skill design rules: narrow triggers, explicit boundaries and verifiable outputs

Tool-call rules: server-side authorisation and deny-by-default allow-lists

Memory rules: scoped retrieval, expiry and user-visible deletion

RAG rules: citation-grade retrieval and evaluated recall before shipping