Aiden 为远程技能安装增加专用路由与原子发布
Aiden adds dedicated routing and atomic publication for remote skill installs
CodeFace 团队复盘 Aiden 的一次意图路由问题:远程技能链接可能被当成普通网页抓取,继而走向手工修改。修复后,skill_manage install 会暂存 SKILL.md 与配套文件、验证内容,再以原子方式发布,失败时不留下半成品。这是项目团队的工程说明,不是独立安全审计;它展示的是更明确的操作边界,而非对任意第三方技能的信任保证。
The CodeFace team describes an intent-routing problem in Aiden: a remote skill URL could be treated as a page to scrape and lead to manual patching. The new skill_manage install path stages SKILL.md and companion files, validates them, and publishes atomically so failures do not leave a partial install. This is the project's engineering account, not an independent security audit; it clarifies operational boundaries rather than guaranteeing trust in arbitrary third-party skills.