Validate Protobuf Schema

Overview

You send one to one hundred virtual .proto files. Squillify materializes them in a temporary directory and runs a disposable protoc child with a fixed argument vector: proto_path, descriptor_set_out and include_imports. Path traversal is rejected. This does not run plugins, fetch remote imports or emit generated source. A successful call costs 2 execution credits.

Protobuf validation must stay off the API classloader and must not run plugins.

When to use it

Scope

Non-goals

• Does not generate language source
• Does not run protoc plugins
• Does not fetch remote imports

Properties

Capabilities

Cost & billing

Flat rate per invocation

File handling

How we handle your data

Input schema

Output schema

API contract

curl -sS -X POST "$BASE/v1/execute" -H "Authorization: Bearer $KEY" -H 'Content-Type: application/json' -d '{"skillKey":"schema.validate_protobuf_schema","input":{"files":[{"path":"ping.proto","source":"syntax = \"proto3\"; message Ping { string id = 1; }"}]}}'

import { Squillify } from "@squillify/sdk";

const sq = new Squillify({ apiKey: process.env.SQUILLIFY_API_KEY });

const { output } = await sq.execute("schema.validate_protobuf_schema", {"files":[{"source":"syntax = \"proto3\";\npackage demo;\nmessage Ping { string id = 1; }\n","path":"ping.proto"}]});

Errors

Other limits

Limitations

• Does not generate language source
• Does not run protoc plugins
• Does not fetch remote imports
• Code generation
• Buf lint or breaking-change checks

How to call

POST /v1/execute (requires authentication)

{
  "skillKey": "schema.validate_protobuf_schema",
  "input": {
    "files": [
      {
        "source": "syntax = \"proto3\";\npackage demo;\nmessage Ping { string id = 1; }\n",
        "path": "ping.proto"
      }
    ]
  }
}

Examples

{
  "files": [
    {
      "source": "syntax = \"proto3\";\npackage demo;\nmessage Ping { string id = 1; }\n",
      "path": "ping.proto"
    }
  ]
}

{
  "messageCount": 1,
  "serviceCount": 0,
  "valid": true,
  "diagnostics": [],
  "enumCount": 0,
  "engine": "protoc",
  "fileCount": 1,
  "descriptorSetDigest": "2293dc9ef72c5f8c0192ac4db443462b2214d036923c1eed305be60e73ef1a18"
}

{
  "files": [
    {
      "source": "syntax = \"proto3\";\npackage demo;\nmessage Ping { string id = 1; string id = 2; }\n",
      "path": "ping.proto"
    }
  ]
}

{
  "fileCount": 1,
  "enumCount": 0,
  "valid": false,
  "messageCount": 0,
  "serviceCount": 0,
  "diagnostics": [
    {
      "code": "PROTOBUF_COMPILE",
      "severity": "ERROR",
      "message": "protoc rejected the virtual source set.",
      "path": "/files"
    }
  ],
  "engine": "protoc"
}

Recommended use cases

• Lint a proto source set before a producer publishes it
• Reject path-traversal virtual files before compile

Avoid for

• Code generation
• Buf lint or breaking-change checks

Related skills

Composable with

Safety & privacy

• Runs without calling any external service.
• Your payloads are never stored permanently.
• Telemetry captures metadata only — never your payload contents.
• We never train models on your payloads.
• No human reviews your payloads.

Tags