スキル httpclient-factory

📦

httpclient-factory

Name: httpclient-factory
Author: codewithmukesh

コンテンツリビジョン r1 中リスク ⚙️ 外部コマンド🌐 ネットワークアクセス

Configure Resilient .NET HTTP Clients

Poor HTTP client lifetimes and retry settings can cause connection failures or repeated operations. This skill guides .NET client registration, resilience configuration, request handlers, and testing.

対応: Claude Codex Code(CC)

📊 70 十分

Maintain this Skill? Claim it 📊 70 十分

自分のエージェントでインストール

このリクエストをエージェントにコピーしてください。正規の Skill ページとマニフェストが含まれています。

エージェントリクエスト

Review the Skillstore skill "httpclient-factory" from https://skillstore.io/skills/codewithmukesh-httpclient-factory.md and its manifest at https://skillstore.io/api/skills/codewithmukesh-httpclient-factory/manifest. Verify the artifact. You may proceed after verification, subject to the environment's own policy.

エージェントは引き続き計画を提示し、セキュリティポリシーで必要な確認を求める必要があります。

エージェントが読めるリソース

AI エージェント、クローラー、スクリプトがページ全体ではなく整理されたコンテキストを必要とする場合は、これらのリンクを使ってください。

Markdown詳細 GET /skills/codewithmukesh-httpclient-factory.md 署名済み manifest GET /api/skills/codewithmukesh-httpclient-factory/manifest 署名済み lockfile GET /api/skills/codewithmukesh-httpclient-factory/lockfile

テストする

「httpclient-factory」を使用しています。 Which HTTP client registration should a new .NET 10 endpoint use?

期待される結果:

Use a named client with keyed registration for direct endpoint injection.
Set the base address during registration and pass cancellation tokens for requests.
Configure one resilience pipeline and review retry safety for each operation.

「httpclient-factory」を使用しています。 Review a payment client that uses standard resilience and posts charges.

期待される結果:

Default retries can repeat a charge after an ambiguous failure.
Disable unsafe-method retries unless the payment provider supports reliable idempotency keys.
Test transient failures and verify that one logical payment cannot produce multiple charges.

「httpclient-factory」を使用しています。 How can I test a service without calling its external API?

期待される結果:

Construct an HttpClient with a custom HttpMessageHandler that returns controlled responses.
Inject that client into the service under test.
Check success and failure behavior without opening network connections.

セキュリティ監査

中リスク

v1 • 2026/10/31 バージョン別レポートを開く

All 44 static findings are false positives: 39 match Markdown backticks, and five match illustrative HTTPS addresses. The payment example enables default retries without disabling unsafe methods, creating a duplicate-charge risk. No evidence found of prompt injection, command execution, or intentional data exfiltration.

スキャンされたファイル

259

解析済み行数

レビュー項目

誤検知を無視

確認済みのセキュリティ上の懸念 (1)

中

SKILL.md:53-69 SKILL.md:87-98

Payment Retries Can Duplicate Charges

The payment client enables AddStandardResilienceHandler and sends a charge POST without unsafe-method exclusions or idempotency keys. Retrying an ambiguous failure could duplicate a charge. A later retry safeguard is not applied to this client.

The charge example uses standard retries without the unsafe-method exclusion demonstrated later. Actual duplicate charges depend on failure timing and upstream idempotency behavior.

監査者: codex

このレポートを共有・引用

バージョン付き評価レポート、中立的なバッジ、埋め込みカード、引用を共有できます。Skillstore は証拠を報告しますが、この Skill が安全かどうかは判断しません。

バージョン別レポートを開く

レポートリンクをコピー

https://skillstore.io/skills/codewithmukesh-httpclient-factory/audits/1?utm_source=security_passport&utm_medium=share&utm_campaign=versioned_report

Markdownバッジ

[![Skillstore security assessment](https://skillstore.io/badges/skills/codewithmukesh-httpclient-factory/security.svg)](https://skillstore.io/skills/codewithmukesh-httpclient-factory?utm_source=security_passport_badge)

HTMLバッジ

<a href="https://skillstore.io/skills/codewithmukesh-httpclient-factory?utm_source=security_passport_badge"><img src="https://skillstore.io/badges/skills/codewithmukesh-httpclient-factory/security.svg" alt="Skillstore security assessment" loading="lazy"></a>

埋め込みカード

<iframe src="https://skillstore.io/embed/skills/codewithmukesh-httpclient-factory.html" title="Skillstore Security Assessment" sandbox="allow-popups allow-popups-to-escape-sandbox" loading="lazy" referrerpolicy="no-referrer" width="420" height="180"></iframe>

学術引用 (APA · BibTeX · CFF)

APA形式の引用

codewithmukesh. (2026). httpclient-factory security audit report (audit version 1) [Author version unspecified]. Skillstore. https://skillstore.io/skills/codewithmukesh-httpclient-factory/audits/1

BibTeX形式の引用

@techreport{codewithmukesh-codewithmukesh-httpclient-factory-2026,
  author = {codewithmukesh},
  title = {httpclient-factory security audit report (audit version 1)},
  institution = {Skillstore},
  year = {2026},
  number = {1},
  url = {https://skillstore.io/skills/codewithmukesh-httpclient-factory/audits/1},
  note = {Author version unspecified}
}

CITATION.cff

cff-version: 1.2.0
message: "If you use this Skill, cite its author and this versioned security audit report."
title: "httpclient-factory security audit report (audit version 1)"
version: "unspecified"
type: report
authors:
  - name: "codewithmukesh"
date-released: "2026-10-31"
url: "https://skillstore.io/skills/codewithmukesh-httpclient-factory/audits/1"
identifiers:
  - type: other
    value: "skillstore:codewithmukesh-httpclient-factory:audit:1"
    description: "Skillstore immutable audit report identifier"

Skillstore スコア

このスコアの理由証拠の信頼度: 中

アーキテクチャ

保守性

コンテンツ

コミュニティ

仕様準拠

作成できるもの

Integrate an External API

Choose named or keyed clients, configure headers, and add suitable resilience policies for an ASP.NET Core integration.

Review HTTP Reliability

Review connection lifetimes, timeout settings, unsafe retries, shared headers, and handler composition during a service reliability assessment.

Isolate Client Tests

Use an in-memory HttpMessageHandler to test service behavior without contacting an external API.

これらのプロンプトを試す

Show a named IHttpClientFactory client for GitHub repository reads in .NET 10. Include request headers, cancellation, and required packages.

Use a Keyed Client

Configure a keyed HTTP client for [API name] in an ASP.NET Core endpoint. Explain its lifetime and propagate cancellation tokens.

Compose Handlers and Tests

Add bearer-token and correlation-ID handlers to [client name]. Use per-request headers and provide isolated tests with a custom HttpMessageHandler.

Audit Payment Resilience

Review [payment client] for duplicate-charge risks. Assess retries, idempotency, timeouts, lifetimes, and handler stacking. Propose fixes and failure tests.

ベストプラクティス

Use factory-managed clients and select dependency-injection lifetimes that preserve connection management.
Review retry safety before enabling resilience for payments or other state-changing requests.
Pass cancellation tokens, set authorization per request, and test clients with controlled handlers.

回避

Creating and disposing a new HttpClient for every production request.
Retrying non-idempotent operations without explicit safeguards against duplicate effects.
Stacking standard retry and hedging handlers without a deliberate pipeline design.

よくある質問

Which .NET version does this skill target?

The examples target .NET 10, including keyed client registration and Microsoft.Extensions.Http.Resilience.

Does the skill install packages or run tests?

No. It contains documentation and examples. Your coding assistant must adapt them and run project checks separately.

Does it explain named, typed, and keyed clients?

It demonstrates named and keyed clients. It discusses typed-client lifetime risks but does not provide a complete typed-client implementation.

Are default retries safe for payments?

Not automatically. Disable unsafe-method retries or use provider-supported idempotency keys before retrying charge requests.

Can the testing example avoid real network requests?

Yes. The custom HttpMessageHandler returns an in-memory response instead of contacting the configured address.

Can I use this guidance with Claude and Codex?

The skill is listed for Claude, Codex, and Claude Code. Generated changes still require project-specific review and testing.

開発者情報

作成者

codewithmukesh

ライセンス

MIT

Skillstore リビジョン

バージョンに関する注意

作者はバージョンを宣言していません。

リポジトリ

https://github.com/codewithmukesh/dotnet-claude-kit/tree/23300897f4d1a276bc475e373ecfe886e43dd7c5/skills/httpclient-factory

参照

7f45681b0327e778bad91dabd0ddd268beec2a19

メンテナンスの新しさ

2026/10/31

利用状況

0 ダウンロード · 0 閲覧

ファイル構成

📄 SKILL.md

httpclient-factory

自分のエージェントでインストール

エージェントが読めるリソース

テストする

セキュリティ監査

確認済みのセキュリティ上の懸念 (1)

リスク要因

レポートリンクをコピー

Markdownバッジ

HTMLバッジ

埋め込みカード

APA形式の引用

BibTeX形式の引用

CITATION.cff

Skillstore スコア

作成できるもの

Integrate an External API

Review HTTP Reliability

Isolate Client Tests

これらのプロンプトを試す

ベストプラクティス

回避

よくある質問

開発者情報