Habilidades httpclient-factory
📦

httpclient-factory

Revisión del contenido r1 Riesgo medio ⚙️ Comandos externos🌐 Acceso a red

Configure Resilient .NET HTTP Clients

Poor HTTP client lifetimes and retry settings can cause connection failures or repeated operations. This skill guides .NET client registration, resilience configuration, request handlers, and testing.

Compatible con: Claude Codex Code(CC)
Maintain this Skill? Claim it 📊 70 Adecuado

Instalar con mi Agente

Copia esta solicitud en tu Agente. Incluye la página canónica del Skill y el manifiesto.

Solicitud de agente
Review the Skillstore skill "httpclient-factory" from https://skillstore.io/skills/codewithmukesh-httpclient-factory.md and its manifest at https://skillstore.io/api/skills/codewithmukesh-httpclient-factory/manifest. Verify the artifact. You may proceed after verification, subject to the environment's own policy.

Tu Agente debe seguir mostrando su plan y solicitar cualquier confirmación exigida por la política de seguridad.

Recursos legibles por agentes

Usa estos enlaces cuando un agente de IA, crawler o script necesite contexto limpio en vez de leer la página completa.

Pruébalo

Usando "httpclient-factory". Which HTTP client registration should a new .NET 10 endpoint use?

Resultado esperado:

  • Use a named client with keyed registration for direct endpoint injection.
  • Set the base address during registration and pass cancellation tokens for requests.
  • Configure one resilience pipeline and review retry safety for each operation.

Usando "httpclient-factory". Review a payment client that uses standard resilience and posts charges.

Resultado esperado:

  • Default retries can repeat a charge after an ambiguous failure.
  • Disable unsafe-method retries unless the payment provider supports reliable idempotency keys.
  • Test transient failures and verify that one logical payment cannot produce multiple charges.

Usando "httpclient-factory". How can I test a service without calling its external API?

Resultado esperado:

  • Construct an HttpClient with a custom HttpMessageHandler that returns controlled responses.
  • Inject that client into the service under test.
  • Check success and failure behavior without opening network connections.

Auditoría de seguridad

Riesgo medio

All 44 static findings are false positives: 39 match Markdown backticks, and five match illustrative HTTPS addresses. The payment example enables default retries without disabling unsafe methods, creating a duplicate-charge risk. No evidence found of prompt injection, command execution, or intentional data exfiltration.

1
Archivos escaneados
259
Líneas analizadas
0
Elementos de revisión
0
Falsos positivos ignorados

Preocupaciones de seguridad confirmadas (1)

Medio
Payment Retries Can Duplicate Charges
The payment client enables AddStandardResilienceHandler and sends a charge POST without unsafe-method exclusions or idempotency keys. Retrying an ambiguous failure could duplicate a charge. A later retry safeguard is not applied to this client.
The charge example uses standard retries without the unsafe-method exclusion demonstrated later. Actual duplicate charges depend on failure timing and upstream idempotency behavior.
Auditado por: codex
Compartir y citar este informe

Comparte el informe de evaluación versionado, la insignia neutral, la tarjeta insertable y las citas. Skillstore presenta evidencias sin decidir si este Skill es seguro.

Abrir el informe versionado
Evaluación de seguridad

Copiar enlace del informe

https://skillstore.io/skills/codewithmukesh-httpclient-factory/audits/1?utm_source=security_passport&utm_medium=share&utm_campaign=versioned_report

Insignia Markdown

[![Skillstore security assessment](https://skillstore.io/badges/skills/codewithmukesh-httpclient-factory/security.svg)](https://skillstore.io/skills/codewithmukesh-httpclient-factory?utm_source=security_passport_badge)

Insignia HTML

<a href="https://skillstore.io/skills/codewithmukesh-httpclient-factory?utm_source=security_passport_badge"><img src="https://skillstore.io/badges/skills/codewithmukesh-httpclient-factory/security.svg" alt="Skillstore security assessment" loading="lazy"></a>

Tarjeta para insertar

<iframe src="https://skillstore.io/embed/skills/codewithmukesh-httpclient-factory.html" title="Skillstore Security Assessment" sandbox="allow-popups allow-popups-to-escape-sandbox" loading="lazy" referrerpolicy="no-referrer" width="420" height="180"></iframe>
Citas académicas (APA · BibTeX · CFF)

Cita APA

codewithmukesh. (2026). httpclient-factory security audit report (audit version 1) [Author version unspecified]. Skillstore. https://skillstore.io/skills/codewithmukesh-httpclient-factory/audits/1

Cita BibTeX

@techreport{codewithmukesh-codewithmukesh-httpclient-factory-2026, author = {codewithmukesh}, title = {httpclient-factory security audit report (audit version 1)}, institution = {Skillstore}, year = {2026}, number = {1}, url = {https://skillstore.io/skills/codewithmukesh-httpclient-factory/audits/1}, note = {Author version unspecified} }

CITATION.cff

cff-version: 1.2.0 message: "If you use this Skill, cite its author and this versioned security audit report." title: "httpclient-factory security audit report (audit version 1)" version: "unspecified" type: report authors: - name: "codewithmukesh" date-released: "2026-10-31" url: "https://skillstore.io/skills/codewithmukesh-httpclient-factory/audits/1" identifiers: - type: other value: "skillstore:codewithmukesh-httpclient-factory:audit:1" description: "Skillstore immutable audit report identifier"

Puntuación de Skillstore

Por qué esta puntuación Confianza de la evidencia: Medio
55
Arquitectura
85
Mantenibilidad
87
Contenido
65
Comunidad
91
Cumplimiento de la especificación

Lo que puedes crear

Integrate an External API

Choose named or keyed clients, configure headers, and add suitable resilience policies for an ASP.NET Core integration.

Review HTTP Reliability

Review connection lifetimes, timeout settings, unsafe retries, shared headers, and handler composition during a service reliability assessment.

Isolate Client Tests

Use an in-memory HttpMessageHandler to test service behavior without contacting an external API.

Prueba estos prompts

Register a Named Client
Show a named IHttpClientFactory client for GitHub repository reads in .NET 10. Include request headers, cancellation, and required packages.
Use a Keyed Client
Configure a keyed HTTP client for [API name] in an ASP.NET Core endpoint. Explain its lifetime and propagate cancellation tokens.
Compose Handlers and Tests
Add bearer-token and correlation-ID handlers to [client name]. Use per-request headers and provide isolated tests with a custom HttpMessageHandler.
Audit Payment Resilience
Review [payment client] for duplicate-charge risks. Assess retries, idempotency, timeouts, lifetimes, and handler stacking. Propose fixes and failure tests.

Mejores prácticas

  • Use factory-managed clients and select dependency-injection lifetimes that preserve connection management.
  • Review retry safety before enabling resilience for payments or other state-changing requests.
  • Pass cancellation tokens, set authorization per request, and test clients with controlled handlers.

Evitar

  • Creating and disposing a new HttpClient for every production request.
  • Retrying non-idempotent operations without explicit safeguards against duplicate effects.
  • Stacking standard retry and hedging handlers without a deliberate pipeline design.

Preguntas frecuentes

Which .NET version does this skill target?
The examples target .NET 10, including keyed client registration and Microsoft.Extensions.Http.Resilience.
Does the skill install packages or run tests?
No. It contains documentation and examples. Your coding assistant must adapt them and run project checks separately.
Does it explain named, typed, and keyed clients?
It demonstrates named and keyed clients. It discusses typed-client lifetime risks but does not provide a complete typed-client implementation.
Are default retries safe for payments?
Not automatically. Disable unsafe-method retries or use provider-supported idempotency keys before retrying charge requests.
Can the testing example avoid real network requests?
Yes. The custom HttpMessageHandler returns an in-memory response instead of contacting the configured address.
Can I use this guidance with Claude and Codex?
The skill is listed for Claude, Codex, and Claude Code. Generated changes still require project-specific review and testing.

Detalles del desarrollador

Licencia

MIT

Revisión de Skillstore

r1

Aviso de versión

El autor no declaró una versión.

Ref.

7f45681b0327e778bad91dabd0ddd268beec2a19

Actualidad del mantenimiento

31/10/2026

Uso

0 descargas · 0 vistas

Estructura de archivos

📄 SKILL.md

Más de codewithmukesh

Ver todo
Ver todo