Install
$ agentstack add skill-butterbase-ai-butterbase-skills-journey-preflight ✓ scanned · ✓ verified, works with Claude Code, Cursor, and more.
Security review
✓ PassedNo issues found. Passed automated security review. · v0.1.0 How review works →
- ✓ Prompt-injection patterns
- ✓ Secret / credential exfiltration
- ✓ Dangerous shell & filesystem operations
- ✓ Untrusted network calls
- ✓ Known-malicious package signatures
What it can access
- ✓ Network access No
- ✓ Filesystem access No
- ✓ Shell / process execution No
- ✓ Environment & secrets No
- ✓ Dynamic code execution No
From automated source analysis of v0.1.0. “Used” means the capability is present in the source — more access means more to trust, not that it’s unsafe.
Verified badge
Passed review? Show it. Paste this badge into your README, it links to the public security report.
Reliability & compatibility
Declared compatibility
Compatibility is declared by the source manifest. End-to-end runtime verification is coming, see below.
We're building live execution health for every listing: tool-call success rate, median latency, uptime, and last-checked timestamps, measured, not self-reported. It isn't live yet, so we don't show numbers we can't stand behind.
How agent discovery & health will work →About
Butterbase Preflight
Gate that ensures the user can actually talk to the Butterbase platform before any stage tries to. Writes results to docs/butterbase/03-preflight.md and stamps app_id + api_base into 00-state.md.
When to use
- Automatically as the first step of any
journey-*build stage when03-preflight.mdis missing, older than 24 hours, or00-state.md'sapp_idis null. - Directly via
/butterbase-skills:journey-preflightwhen the user wants to re-verify.
Procedure
For each check, write a one-line result to 03-preflight.md ( ✓/✗ ). Ask the user to fix any ✗ before continuing — do not auto-skip failures.
- Butterbase account. Call
mcp__butterbase__list_regions(cheapest call). Success → ✓. Auth error → ✗ with"Sign up at https://butterbase.ai, then run npx @butterbase/cli mcp install and complete the OAuth flow in your client (e.g. /mcp in Claude Code).". If MCP tool is not visible at all, jump to step 2.
- MCP server connected. Check whether
mcp__butterbase__*tools are listed in the agent's available tools. Absent → ✗ with"Install the Butterbase MCP server: npx @butterbase/cli mcp install. See https://butterbase.ai/docs/mcp.". Present → ✓.
- MCP OAuth complete. Auth for
mcp__butterbase__*calls is OAuth, not an env var — step 1 already proved it works iflist_regionssucceeded. If step 1 failed with auth error, retry after the user runs/mcp(orclaude mcp login butterbase) and completes browser consent.BUTTERBASE_API_KEY(bb_sk_…) is still relevant for runtime app code (functions, server-side@butterbase/sdk) — check separately at deploy time, not here.
- App provisioned. Read
00-state.mdfront-matter forapp_id.
- Non-null and
mcp__butterbase__manage_app(actionget_config) succeeds → ✓. - Null → ask the user:
"No app yet. Create one now? (yes/no — if no, you can paste an existing app_id)". On yes, callmcp__butterbase__init_app(ask for app name and region — recommendus-east-1as default). Captureapp_idandapi_basefrom the response. Update00-state.mdfront-matter. - User-provided app_id → verify with
manage_app get_config; on success update00-state.md.
- CLI installed. Run
butterbase --version. If "command not found":
- Read the Toolchain section of
02-plan.md. IfCLI usage: yes(default), prompt: "Install@butterbase/cliglobally now? (yes / skip)". On yes, runnpm install -g @butterbase/cli. On skip, note in03-preflight.mdthat the CLI is not installed and which workflows will require dashboard fallback. - If
CLI usage: no, skip this check.
03-preflight.md format
# Preflight —
- account ✓
- mcp_connected ✓
- api_key ✓
- app_provisioned ✓ app_id=app_abc123 region=us-east-1
Re-run with /butterbase-skills:journey-preflight.
Outputs
- Writes/overwrites
docs/butterbase/03-preflight.md. - Updates
00-state.mdfront-matterapp_id,api_base,last_updated, and ticks- [x] preflight.
Anti-patterns
- ❌ Echoing the API key value back to the user.
- ❌ Skipping a failed check ("I'll just try anyway"). Stop and ask the user to fix it.
- ❌ Calling
init_appwithout confirming with the user — apps cost money on paid plans.
Source & license
This open-source skill is cataloged on AgentStack and links to its original source — we do not rehost the code.
- Author: butterbase-ai
- Source: butterbase-ai/butterbase-skills
- License: MIT
Install and usage instructions live in the source repository linked above.
Reviews
No reviews yet, be the first.
Write a review
Versions
- v0.1.0 Imported from the upstream source.