Home / devcodex-labs / devcodex · GitHub

external-integration-architecture SKILL.md skillA

external-integration-architecture from devcodex-labs/devcodex is an agent skill: a SKILL.md folder an AI agent loads when a task calls for it.

Install it, pinned

mdr add devcodex-labs/devcodex/external-integration-architecture@git:20260730.6ee304a

Pins git:20260730.6ee304a in mdr.lock. Pin the fingerprint instead.

Audit grade: A, 17 of 17 checks passed
Kind: SKILL.md skill
Repository: devcodex-labs/devcodex
Path: content/skills/external-integration-architecture/SKILL.md
Versions recorded: 1
Latest version: git:20260730.6ee304a, committed Jul 30, 2026
Size: 3,314 bytes
Repository stars: 432
License: AGPL-3.0

外部集成架构专家 Owner — 当任务涉及第三方 API、Webhook、OAuth、回调、provider/connector、配额、重试、降级、供应商锁定、外部故障或集成文档时使用；要求隔离外部边界并设计失败恢复。.

Collected from public GitHub. Every version is saved exactly as it was and never changes. Install it at an exact version with the mdr tool, and every file is checked before it reaches your agent. The main file is checked against the SHA-256 fingerprint recorded here, and the others against the fingerprints GitHub keeps for its source commit. The automatic checks below grade the latest version, and the same checks always give the same file the same grade.

What the file says

# External Integration Architecture Skill

## 定位

本 Skill 负责外部集成 Owner 视角。它要求把第三方能力当作不稳定边界处理：认证、回调、配额、重试、降级、审计和退出策略都要可验证。

## 触发条件

| 场景 | 是否触发 |
|------|:--------:|
| 第三方 API、OAuth、Webhook、callback、provider、connector、adapter、外部 SDK | 必须 |
| 任务涉及重试、超时、配额、限流、外部失败、降级、供应商锁定或回放 | 必须 |
| 文档或示例描述外部接入流程 | 必须 |
| 纯仓库内部逻辑且无外部系统边界 | N/A + skipReason |

## 核心门禁

| Gate | 要求 | 证据 |
|------|------|------|
| `ExternalIntegrationArchitectureGate` | 外部边界、认证回调、配额重试、降级和锁定风险必须成矩阵 | providerBoundary、quotaRetryPolicy |
| `ProviderBoundaryGate` | 外部 payload 不得污染公共业务契约 | adapter、mapper、contract |
| `AuthCallbackGate` | OAuth、签名、回调、重放和状态校验必须设计 | authCallbackModel |
| `QuotaRetryDegradationGate` | 配额、重试、幂等、超时、降级和失败恢复必须明确 | failureDegradation |
| `VendorLockInGate` | 供应商锁定和替换成本必须说明 | lockInExitPlan |

## 执行步骤

1. 区分业务契约、内部 provider adapter、外部 payload。
2. 识别认证、签名、callback、webhook、重放、幂等和审计边界。
3. 设计配额、限流、重试、退避、超时、降级和最终一致性。
4. 记录供应商锁定、替换成本、兼容层和迁移路径。
5. 为成功、失败、部分成功、重复回调和外部不可用建立验证。

## 输出字段

```markdown
## ExternalIntegrationArchitectureGate

| 字段 | 内容 |
|------|------|
| providerBoundary | 业务契约 / adapter / 外部 payload 边界 |
| authCallbackModel | OAuth、签名、callback、webhook、重放防护 |
…

Read the whole file at its exact version.

How to install

The exact contents, by fingerprint

mdr add devcodex-labs/devcodex/external-integration-architecture@sha256:e4f250905a49ccae

The line at the top of this page pins the label git:20260730.6ee304a, which is what most people want. This one pins the sha256 fingerprint of the contents instead, so it survives a label being moved. Either way the exact version is written to mdr.lock, and mdr install downloads and checks those contents again, so it installs them exactly or stops with an error.

Badge

[![mdr](https://markdownregistry.com/badge/art_6nuc4aywc6ku6dz3.svg)](https://markdownregistry.com/a/art_6nuc4aywc6ku6dz3)

5 badge image fetches in 30 days. What the badge shows.

Versions

The registry has recorded 1 version of this file, committed on Jul 30, 2026.

version	committed	commit	size	audit
git:20260730.6ee304a latest	2026-07-30	6ee304a	3,314 B	A	view

Audit of the latest version

A 17 of 17 checks passed. Fixed automatic checks with no AI involved, so the same checks give the same answer every run.

pass: Frontmatter block present
pass: Frontmatter declares a name
pass: Frontmatter declares a description
pass: Size between 200 bytes and 200 KB (3314 bytes)
pass: No zero-width or bidi control characters
pass: No instruction hidden inside an HTML comment
pass: No link to an exfiltration or paste host
pass: No credential-shaped string
pass: No instruction to send local credentials anywhere
pass: No text hidden with inline styles
pass: No prompt-injection phrasing
pass: No curl or wget piped into a shell
pass: No recursive delete of root, home or parent
pass: No instruction to read or print local credentials
pass: No base64 blob over 200 characters
pass: No link to a raw IP address
pass: No script tag

Source

GitHub

devcodex-labs/devcodex · 432 stars · license AGPL-3.0 · pushed 2026-10-27 · branch main

API

GET https://markdownregistry.com/api/v1/artifacts/art_6nuc4aywc6ku6dz3
GET https://markdownregistry.com/api/v1/resolve?ref=devcodex-labs/devcodex/external-integration-architecture
GET https://markdownregistry.com/api/v1/blob/e4f250905a49ccae22bb398f915f762c6a665b1d7f0649209f28751e689e992f

Your AI assistant does the legwork. You hear about the deals worth your word. Hand yours the standing instructions at modelranch.com and it joins the network that reads files like this one.

Guides: the SKILL.md format and its required fields · what to check before you install a skill · how to pin a skill to an exact version · where to find agent skills · keeping a team on the same skills · which agent file does what.

More from devcodex-labs/devcodex

accessibility-i18n SKILL.md skill

devcodex-labs/devcodex · content/skills/accessibility-i18n/SKILL.md · 无障碍与国际化专家 Owner — 当任务涉及可访问性、键盘操作、焦点、屏幕阅读器、ARIA、语言地区、本地化、RTL、翻译资源、用户可见文案或多语言文档时使用；要求把包容性体验和本地化验证绑定到真实用户路径。