Skill
Website Skeleton Skill
一句话说需求,AI 生成完整前后端网站并自动部署到 EdgeOne Pages。支持电商栈(Auth/购物车/支付)、AI 栈(SSE 流式对话)、管理后台。
When to use Website Skeleton Skill
Choose if
You want to scaffold a full-stack site (e-commerce, AI assistant, or SaaS admin) on Tencent EdgeOne Pages with security defaults pre-wired: payment-idempotency KV locks, server-side price authority, bcrypt cost ≥ 12, 15-minute access tokens + 7-day rotating refresh tokens, CSP headers, sliding-window rate limits (10/min unauth, 60/min auth for AI). Pick this when you're already committed to EdgeOne Pages and want explicit user-confirmation checkpoints before deploys, payment activation, env injection, migrations, and cron tasks.
Avoid if
You're not deploying to EdgeOne Pages — the skill is platform-specific (V8 runtime Edge Functions + Node Cloud Functions + D1 + KV) with documented constraints (KV access exclusive to Edge, bcrypt exclusive to Cloud, Cloud Functions directory must be named `cloud-functions/`, no waitUntil in Edge). Also avoid if you need a turnkey production launch — the README disclaims that cron task execution times are advisory only and HS256→RS256 migration requires a 30-day compatibility window.
Risk Flags
- MEDIUM scope EdgeOne Pages platform constraints — KV access exclusive to Edge Functions, bcrypt must run in Cloud Functions, Cloud Functions directory must be named `cloud-functions/`, no waitUntil support in Edge (SSE/streaming must use Cloud).
- MEDIUM scope README notes Platform Middleware CORS handling may conflict with payment callback IP whitelisting; D1 transactions require exponential-backoff retry logic for deadlock recovery.
- LOW scope README states cron task execution times are advisory only, not guaranteed; HS256→RS256 migration requires a 30-day compatibility window.
- LOW scope Multi-tenant SaaS and npm package distribution are Phase 4/5 — planned, not shipped per the README's phase roadmap.
Cost
Type: Unknown
Distribution
- ClawHub
website-skeleton- License
- MIT-0