Install
$ agentstack add skill-ucdavis-ai-skills-registry-assistant-rocky-lti-assist ✓ scanned · ✓ verified, works with Claude Code, Cursor, and more.
Security review
✓ PassedNo issues found. Passed automated security review. · v0.1.0 How review works →
- ✓ Prompt-injection patterns
- ✓ Secret / credential exfiltration
- ✓ Dangerous shell & filesystem operations
- ✓ Untrusted network calls
- ✓ Known-malicious package signatures
What it can access
- ✓ Network access No
- ✓ Filesystem access No
- ✓ Shell / process execution No
- ✓ Environment & secrets No
- ✓ Dynamic code execution No
From automated source analysis of v0.1.0. “Used” means the capability is present in the source — more access means more to trust, not that it’s unsafe.
Verified badge
Passed review? Show it. Paste this badge into your README, it links to the public security report.
Reliability & compatibility
Declared compatibility
Compatibility is declared by the source manifest. End-to-end runtime verification is coming, see below.
We're building live execution health for every listing: tool-call success rate, median latency, uptime, and last-checked timestamps, measured, not self-reported. It isn't live yet, so we don't show numbers we can't stand behind.
How agent discovery & health will work →About
Rocky-LTI Coding Assistant
Provides project-aware coding guidance for the Rocky-LTI Canvas integration.
Project Overview
Rocky-LTI is a Canvas LMS integration using LTI 1.3 that exposes an AI agent (Rocky) to students and instructors. The AI agent is powered via Model Context Protocol (MCP), with Canvas course data surfaced as MCP resources and tools.
Monorepo Structure
rocky-lti/
├── lti/
│ ├── backend/
│ │ ├── agent/ # FastAPI server + MCP (PRIMARY backend)
│ │ │ ├── src/
│ │ │ │ ├── app.py # FastAPI entrypoint
│ │ │ │ ├── api/ # Routes, models, services
│ │ │ │ ├── canvas_mcp/ # MCP server (servers, services, classes, models)
│ │ │ │ └── env.py # Pydantic settings
│ │ │ ├── tests/ # pytest-asyncio tests
│ │ │ └── alembic/ # DB migrations (agent-side)
│ │ ├── db/ # Shared SQLAlchemy models package
│ │ │ └── src/canvas_lti_db/
│ │ └── workers/ # Azure Functions (async tasks)
│ ├── setup/ # LTI tool registration scripts
│ └── web/
│ ├── lti-frontend/ # Production React 19 + TypeScript app
│ └── lti-test-app/ # Dev/test Vite app
├── packages/
│ ├── rocky-chat/ # Shared npm chat component
│ └── rocky-chat-next/ # Next.js variant
└── infrastructure/terraform/ # Azure IaC
Tech Stack & Conventions
Python Backend
- Runtime: Python 3.13, managed exclusively with
uv - Framework: FastAPI with async/await throughout
- ORM: SQLAlchemy (async) + asyncpg (PostgreSQL)
- MCP: FastMCP for Canvas resource/tool/prompt exposure
- Auth: python-jose for JWT; LTI 1.3 OIDC launch flow
- Observability: OpenTelemetry + Azure Monitor
- Linting/Formatting:
ruff(replaces flake8/black/isort)
Never use pip or python -m venv. Always use:
uv add # add dependency
uv run # run script
uv sync # sync environment
uv run pytest # run tests
Frontend
- Framework: React 19 + TypeScript + Vite
- State: React Query for server state
- Styling: Sass
- AI Streaming: OpenAI SDK (streaming responses)
- Package manager: npm (workspace at root)
Infrastructure
- Cloud: Azure Container Apps (deployment target)
- CI/CD: GitHub Actions (
.github/workflows/) developpush → test environment- Release/RC tags → stage environment
- IaC: Terraform under
infrastructure/terraform/ - Containers: Multi-stage Docker builds
Key Patterns
FastAPI Route Structure
Routes live under lti/backend/agent/src/api/ organized by domain (e.g., lti/, oauth/, agent/, tools/). Each domain typically has:
router.py— FastAPI router with endpoint definitionsmodels.py— Pydantic request/response modelsservice.py— Business logic (called from router)db.py— Database access layer
MCP Components (canvas_mcp/)
servers/— FastMCP server instancesservices/— Canvas API data fetchingclasses/— Domain abstractionsmodels/— Pydantic models for MCP types
Database Models
- Shared models in
lti/backend/db/src/canvas_lti_db/ - Migrations split:
lti/backend/agent/alembic/andlti/backend/db/alembic/ - Always use async SQLAlchemy patterns
Testing
- Framework:
pytest+pytest-asyncio - Tests in
lti/backend/agent/tests/ - Mock Canvas OAuth server (Docker) for integration tests
- Run:
uv run pytestfromlti/backend/agent/
LTI 1.3 Auth Flow
- Canvas initiates OIDC login (
/lti/login) - App redirects back with signed JWT
- Canvas POSTs launch JWT (
/lti/launch) - App validates JWT, creates session
Environment Config
lti/backend/agent/src/env.py— PydanticBaseSettings- Secrets via environment variables (Azure Key Vault in prod)
Common Tasks
Add a new API endpoint
- Add route in appropriate
api//router.py - Define Pydantic models in
api//models.py - Implement logic in
api//service.py - Write async tests in
tests/
Add a new MCP resource or tool
- Implement in
canvas_mcp/services/ - Register in appropriate
canvas_mcp/servers/file - Add Pydantic types to
canvas_mcp/models/
Add a database model
- Add SQLAlchemy model to
lti/backend/db/src/canvas_lti_db/ - Generate migration:
uv run alembic revision --autogenerate -m "description" - Apply:
uv run alembic upgrade head
Add a frontend feature
- Work in
lti/web/lti-frontend/src/ - Use React Query for data fetching
- Shared chat UI lives in
packages/rocky-chat/
Pydantic v2
This project uses Pydantic v2. Key differences:
- Use
model_validator,field_validator(not v1@validator) - Use
model_dump()not.dict() - Use
model_config = ConfigDict(...)notclass Config - Settings via
pydantic-settingsBaseSettings
Code Quality Guidelines
- Prefer async/await for all I/O
- Keep routers thin — delegate to services
- Use dependency injection (
Depends) for DB sessions, auth - Type-annotate all function signatures
- Write tests for new endpoints and services
- Follow existing module structure — don't create new top-level packages without discussion
- Use
rufffor linting and formatting (configured inpyproject.toml); runuv run ruff checkanduv run ruff formatbefore committing
Source & license
This open-source skill is cataloged on AgentStack and links to its original source — we do not rehost the code.
- Author: ucdavis
- Source: ucdavis/ai-skills-registry
- License: MIT
Install and usage instructions live in the source repository linked above.
Reviews
No reviews yet, be the first.
Write a review
Versions
- v0.1.0 Imported from the upstream source.