Install
$ agentstack add skill-martin1847-evolab-agent-backend-standard ✓ scanned · ✓ verified, works with Claude Code, Cursor, and more.
Security review
✓ PassedNo issues found. Passed automated security review. · v0.1.0 How review works →
- ✓ Prompt-injection patterns
- ✓ Secret / credential exfiltration
- ✓ Dangerous shell & filesystem operations
- ✓ Untrusted network calls
- ✓ Known-malicious package signatures
What it can access
- ✓ Network access No
- ✓ Filesystem access No
- ✓ Shell / process execution No
- ✓ Environment & secrets No
- ✓ Dynamic code execution No
From automated source analysis of v0.1.0. “Used” means the capability is present in the source — more access means more to trust, not that it’s unsafe.
Verified badge
Passed review? Show it. Paste this badge into your README, it links to the public security report.
Reliability & compatibility
Declared compatibility
Compatibility is declared by the source manifest. End-to-end runtime verification is coming, see below.
We're building live execution health for every listing: tool-call success rate, median latency, uptime, and last-checked timestamps, measured, not self-reported. It isn't live yet, so we don't show numbers we can't stand behind.
How agent discovery & health will work →About
Agent Backend — 后端工程手册(hub)
agent 时代后端工程规范的集中入口。本文件是目录(ToC):每章一句话 + reference 指针。深度全在 references/,按需读单章,别全量加载。
> 双层落地:软层 = 本手册(write-time 预防);硬层(CI 门禁 / ruleset / 清扫 bot)归 你的 IaC 仓 / IaC CTO。 > 粒度:同属"写·评审 agent 后端代码"这一触发的 concern 都在本 hub 作章;独立 skill 仅限触发动词不同者——埋点 → observability-standard、git → git-workflow-standard、A2A 对外契约 → A2A 对外契约规范(本 hub 交叉引用,不重复)。 > TBD 章 = 已占位、待真实素材再写实(不空写通用建议)。
Book I — Foundations
- I-1 何时该建 agent —— simplicity-first;能确定性 / 工作流解决就别上 agent。TBD
- I-2 架构与控制流 —— augmented-LLM 基元、workflow 模式(chaining/routing/parallel/orchestrator-workers/evaluator)、单 vs 多 agent。TBD
Book II — Engineering Concerns
- II-3 上下文与 prompt 工程 →
references/prompt-context.md—— 含 prompt 内容生命周期(写死值绑 eval、模型耦合打REVISIT-WHEN)。 - II-4 工具 / 函数设计(ACI) —— 整合/命名空间/返回上下文/token 效率。TBD(交叉引 A2A 对外契约规范)
- II-5 记忆 / 状态 / 持久 —— session/state、stateless-reducer、pause/resume。TBD
- II-6 检索 / RAG / grounding —— chunking、faithfulness、向量弱点。TBD
- II-7 韧性 / 错误 / 幂等 →
references/resilience.md—— 每个外部/LLM/工具调用:超时 + 有界重试 + 幂等 + 熔断 + 池/并发;事件循环不阻塞(async 运行时承重条,五层门禁:lint→测试期检测→staging 阈值→生产 lag 遥测→部署断言)。 - II-8 人在环(HITL)+ resume 安全 →
references/hitl-resume-safety.md—— 可恢复 flow 的 resume 安全:六道闸防御(持久 checkpoint 校验请求 ctx、fail-closed、runtime 层)。clarify/approve 协议交叉引 A2A 对外契约规范。 - II-9 安全 · 护栏 · 生成操作的有界执行 →
references/safety-bounded-execution.md—— 执行不可信生成操作(尤 SQL)的硬边界、安全分层、workflow 迭代上限。
Book III — Operations & Governance
- III-10 评估与测试 —— offline/online、LLM-as-judge、eval 驱动选型。TBD
- III-11 可观测与成本 / 时延 →
references/observability-cost.md—— 薄:成本/token/时延预算;埋点本体交叉引observability-standard,不重复。 - III-12 规范治理 →
references/governance.md—— 例外/偏离、owner、手册如何演化。
附(本仓并入,非 agent 专属但同一触发)
- A 代码 / 依赖生命周期 + 反死代码 →
references/code-dependency-lifecycle.md—— 引入即退役(ADR-with-sunset)、stale-but-live(EXPIRES/REVISIT-WHEN)、功能旗标生命周期(分类 + 毕业/退休 + 登记册)、死代码检测 + 盲区、反 bloat、清扫。 - B 数据访问纪律(连接·读·写) →
references/data-write-discipline.md—— 读也占连接(弱事务/autocommit 用完即释放;MANAGED+closeConnection=false 无事务读 = 泄漏);记账写移出主链路 / 不跨 LLM 持锁 / 服务端增量;关键写保留原子性但同样不持锁跨 LLM/执行(短原子写 + 锁外执行)。
关联(独立 skill,不在本 hub 重复)
- 埋点 / telemetry →
observability-standard;Git SOP →git-workflow-standard;A2A 对外契约 → A2A 对外契约规范。 - 硬层 CI 门禁 / ruleset / 清扫 bot → 你的 IaC 仓。
Source & license
This open-source skill is cataloged on AgentStack and links to its original source — we do not rehost the code.
- Author: martin1847
- Source: martin1847/evolab
- License: MIT
Install and usage instructions live in the source repository linked above.
Reviews
No reviews yet, be the first.
Write a review
Versions
- v0.1.0 Imported from the upstream source.