Install
$ agentstack add skill-athola-claude-night-market-architecture-paradigm-microkernel ✓ scanned · ✓ verified — works with Claude Code, Cursor, and more.
Security review
✓ PassedNo issues found. Passed automated security review. · v0.1.0 How review works →
- ✓ Prompt-injection patterns
- ✓ Secret / credential exfiltration
- ✓ Dangerous shell & filesystem operations
- ✓ Untrusted network calls
- ✓ Known-malicious package signatures
What it can access
- ✓ Network access No
- ✓ Filesystem access No
- ✓ Shell / process execution No
- ✓ Environment & secrets No
- ✓ Dynamic code execution No
From automated source analysis of v0.1.0. “Used” means the capability is present in the source — more access means more to trust, not that it’s unsafe.
About
The Microkernel (Plugin) Architecture Paradigm
When To Use
- Building extensible systems with plugin architectures
- Products requiring customer-specific customizations
When NOT To Use
- Monolithic applications without plugin extensibility needs
- Systems where all features are core and tightly coupled by design
When to Employ This Paradigm
- When building platforms, Integrated Development Environments (IDEs), data ingestion pipelines, or marketplaces where third parties need to extend core functionality.
- When the core system requires extreme stability, while extensions and features must evolve and change rapidly.
- When isolating optional dependencies and sandboxing untrusted code provided by plugins is critical.
Adoption Steps
- Define Core Services: Clearly delineate the minimal responsibilities of the microkernel, such as scheduling, component lifecycle management, core domain primitives, and messaging.
- Specify the Plugin Contract: Design and document the formal contract for all plugins, including registration procedures, capability descriptors, lifecycle hooks (e.g., start, stop), and the permission model.
- Build the Extension Loader and Sandbox: Implement the mechanisms for loading extensions, performing version compatibility checks, negotiating capabilities, and isolating plugins to prevent failures from cascading.
- Provide a Software Development Kit (SDK): To facilitate plugin development, provide an SDK with project templates, testing harnesses, and compatibility-checking tools.
- Govern the Release Process: Maintain a clear compatibility matrix between core and plugin versions. Implement an automated regression test suite that validates core functionality against a variety of plugins.
Key Deliverables
- An Architecture Decision Record (ADR) describing the division of responsibilities between the core and plugins, along with the governance model for plugin development and certification.
- Formal documentation for the security and permission model, detailing what capabilities are available to plugins.
- An automated plugin validation pipeline that performs linting, runs tests, and executes the plugin within a sandbox environment.
Risks & Mitigations
- Uncontrolled Plugin Proliferation:
- Mitigation: Without a curation process, the maintenance cost of supporting numerous plugins can become unsustainable. Enforce a formal certification process or a marketplace-style review for all third-party plugins.
- Version Skew Between Core and Plugins:
- Mitigation: Use semantic versioning (SemVer) rigorously for both the core and the plugins. Where necessary, provide abstraction layers or "shims" to maintain backward compatibility with older plugins.
- Core System Bloat:
- Mitigation: There is often pressure to add feature logic to the stable core. Aggressively resist this temptation. The core should remain minimal, with new features implemented as plugins whenever possible.
Concrete Components
These vocabulary items name the concrete tools and abstractions that show up when the paradigm is implemented. They are not required dependencies and they are not part of the skill's `tools:` frontmatter (which is reserved for Claude Code tool restrictions). Use this list to disambiguate during architecture discussions.
- `
plugin-loader`: discovers, validates, and activates plugins at runtime - `
sandbox-executor`: runs each plugin in an isolated context with a constrained capability set - `
sdk-generator`: produces language-specific SDKs from the kernel's stable interface
Exit Criteria
- [ ] An ADR documents the microkernel's minimal responsibilities, the plugin contract
(registration, capability descriptors, lifecycle hooks), and the permission model.
- [ ] A formal plugin SDK or specification (templates, testing harness, compatibility checker)
exists before any third-party plugin development begins.
- [ ] An automated plugin validation pipeline (lint, test, sandbox execution) is operational
and gates plugin certification.
- [ ] A compatibility matrix between core versions and supported plugin API versions is
published and updated whenever the core plugin contract changes.
Source & license
This open-source skill is cataloged on AgentStack and links to its original source — we do not rehost the code.
- Author: athola
- Source: athola/claude-night-market
- License: MIT
- Homepage: https://athola.github.io/claude-night-market
Install and usage instructions live in the source repository linked above.
Reviews
No reviews yet — be the first.
Write a review
Versions
- v0.1.0 Imported from the upstream source.