Spark Store Skill

Manage Linux applications by searching, installing, uninstalling, and updating software via Spark Store (Debian-based) or APM (all distros).

Security Scan

The skill's instructions match a package-manager helper, but the SKILL.md references local scripts and system tools that are not declared or included, which is an incoherence you should resolve before trusting it.

Purpose & Capability

The skill's stated purpose (search/install/uninstall Linux apps via Spark Store/APM) is reasonable, but the registry metadata declares no required binaries or files while the SKILL.md explicitly depends on curl, aptss, apm and local Python modules under scripts/ (detect_os.py, spark_store_api.py, spark_apm_api.py). Requiring package manager binaries and helper scripts is expected for this purpose, but the manifest not listing them and the fact that those local scripts are not present in the file manifest is an inconsistency.

Instruction Scope

Instructions are narrowly scoped to searching remote JSON endpoints and running package commands (aptss/apm), which fits the purpose. However the runtime examples import and call local Python modules (scripts.*) that are not included in the skill bundle. That gap could lead an agent to (a) fail, (b) attempt to fetch or execute missing code, or (c) run shell commands directly. The SKILL.md also instructs running sudo aptss/apm commands — these require root and are powerful; the doc does not show safeguards (e.g., dry-run, explicit confirmation) beyond simple prompts.

Install Mechanism

There is no install spec and no code files are present, so nothing is written to disk by an install step — this lowers installer risk. That said, because SKILL.md references local scripts that are missing, the absence of an install step is itself a coherence problem (the skill appears to expect bundled code that isn't provided).

Credentials

The skill declares no environment variables or credentials, which matches the SKILL.md (no API keys required). It does require system-level package manager binaries and root to install/uninstall packages, which is appropriate for the stated task but should be explicitly declared in metadata.

Persistence & Privilege

always is false (normal). The skill can be invoked autonomously by the agent (default), which combined with instructions to run sudo package-manager commands increases risk because an autonomous agent could attempt privileged operations. The skill does not request persistent presence or modify other skills' configs.

What to consider before installing

This skill's goal (manage Linux apps via Spark Store / APM) is plausible, but the SKILL.md references local Python helper scripts (scripts/detect_os.py, spark_store_api.py, spark_apm_api.py) and system binaries (curl, aptss, apm) that are not declared in the registry metadata and are not included in the bundle. Before installing or enabling this skill: 1) ask the publisher to provide the missing scripts or an install spec so you can review code; 2) verify the external endpoints (d.spark-app.store) are trustworthy; 3) ensure aptss/apm/curl presence is declared and available on your systems; 4) be cautious about allowing autonomous invocation because the skill can run sudo package-manager commands — run it first in a safe/non-production environment and require explicit user confirmation for any privileged operation.

星火软件商店 Skill

概述

星火软件商店 Skill 支持在 Linux 系统上搜索、安装和卸载应用程序。支持两个应用商店：

• 星火应用商店 (Spark Store) - 适用于 Debian 系发行版 (deepin, Ubuntu, Debian, UOS 等)
• 星火 APM (AmberPM) - 适用于所有 Linux 发行版 (Arch, Fedora, 银河麒麟等)

触发条件

当用户提出以下请求时触发：

• 搜索应用 / 查找软件
• 安装应用 / 安装软件
• 卸载应用 / 卸载软件
• 更新应用 / 更新软件
• 提到 "星火应用商店" 或 "APM"
• 提到 "aptss" 或 "apm" 命令

系统检测

首先检测当前系统是否为 Debian 系：

from scripts.detect_os import is_debian_based, get_system_name

is_debian = is_debian_based()
system_name = get_system_name()

Debian 系包括：debian, ubuntu, deepin, linuxmint, pop, elementary, kali, UOS, 统信等。

搜索流程

Debian 系系统

同时搜索两个商店，合并结果：

1. 调用 spark_store_api.search(keyword) - 搜索 Spark Store
2. 调用 spark_apm_api.search(keyword) - 搜索 APM
3. 合并结果，按相关性排序
4. 展示搜索结果

非 Debian 系系统

仅搜索 APM：

1. 调用 apm_api.search(keyword) - 搜索 APM
2. 展示搜索结果

搜索 API

Spark Store API

• 分类列表：https://d.spark-app.store/store/categories.json
• 应用列表：https://d.spark-app.store/store/{category}/applist.json

APM API

• 分类列表：https://d.spark-app.store/amd64-apm/categories.json
• 应用列表：https://d.spark-app.store/amd64-apm/{category}/applist.json

安装/卸载流程

Debian 系系统

使用 aptss 命令：

# 安装
sudo aptss install <package_name>

# 卸载
sudo aptss remove <package_name>

# 更新
sudo aptss upgrade

非 Debian 系系统

使用 apm 命令：

# 安装
sudo apm install <package_name>

# 卸载
sudo apm remove <package_name>

# 更新
sudo apm update

命令检查

在执行安装/卸载操作前，检查命令是否可用：

# 检查 aptss
from scripts.spark_store_api import check_command_available as spark_check
spark_check()  # 返回 True/False

# 检查 apm
from scripts.spark_apm_api import check_command_available as apm_check
apm_check()  # 返回 True/False

错误处理

• 网络错误：提示用户检查网络连接
• 命令不存在：提示用户安装对应的工具
• 安装/卸载失败：展示错误信息和建议

使用示例

搜索应用

用户输入："搜索微信"

系统检测：Debian 系
搜索 Spark Store...
搜索 APM...
合并结果：
1. 微信（wine）- com.qq.weixin.spark - 版本 3.9.10deepin1.1
2. 企业微信（wine）- com.qq.weixin.work.deepin - 版本 5.0.0.6008~spark2
...

安装应用

用户输入："安装微信"

检测到 Debian 系系统
请选择安装源：
1. 星火应用商店 (aptss)
2. APM (apm)

用户选择后执行安装命令。

卸载应用

用户输入："卸载微信"

包名：com.qq.weixin.spark
确认卸载？ [Y/n]
执行卸载...

文件结构

spark-store-skill/
├── SKILL.md                    # 本文件
├── README.md                    # 使用说明
└── scripts/
    ├── __init__.py
    ├── detect_os.py             # 系统检测
    ├── spark_store_api.py       # Spark Store API
    └── spark_apm_api.py         # APM API

依赖

• Python 3
• curl
• aptss (Debian 系)
• apm (所有系统)

注意事项

1. 搜索结果可能较多，建议分页展示
2. 安装/卸载需要 root 权限
3. 部分应用可能需要重启才能生效