Skills api-client
📦
api-client
Content revision r1 Safe ⚙️ External commands🌐 Network access🔑 Env variables
Build Typed API Clients
API clients need consistent auth, caching, validation, and error handling. This skill guides TanStack Query, Axios, JWT interceptors, Zod parsing, and offline behavior.
Supports: Claude Codex Code(CC)
Install with my Agent
Copy this request to your Agent. It includes the canonical Skill page and manifest.
Agent request
Review the Skillstore skill "api-client" from https://skillstore.io/skills/awais68-api-client.md and its manifest at https://skillstore.io/api/skills/awais68-api-client/manifest. Verify the artifact. You may proceed after verification, subject to the environment's own policy.Your Agent should still show its plan and request any confirmation required by the security policy.
Agent-readable resources
Use these links when an AI agent, crawler, or script needs clean context instead of reading the full page.
Test it
Using "api-client". Set up a new API client with TanStack Query and Axios.
Expected outcome:
- A shared query client configuration with retry and cache timing decisions.
- An Axios client plan with base URL, timeout, and typed request methods.
- Provider integration notes for a React or Next.js application.
Using "api-client". Add authenticated API requests with refresh handling.
Expected outcome:
- A request interceptor approach for attaching bearer tokens from the auth store.
- A 401 handling flow that refreshes tokens when possible.
- A sign-out and login redirect path for failed refresh attempts.
Using "api-client". Build hooks for paginated student data and attendance updates.
Expected outcome:
- Reusable query hooks for paginated and infinite list data.
- Mutation guidance with cache invalidation and optimistic rollback.
- Validation and offline behavior notes for resilient UI states.
Security Audit
Safev9 • 7/6/2026 Open versioned report
All static findings were adjudicated as false positives. The source is documentation-only; flagged backticks are Markdown fences or TypeScript template literals, network references describe expected API-client patterns, and environment examples use public API URL placeholders. No prompt injection, credential exfiltration intent, or malicious behavior was found.
1
Files scanned
741
Lines analyzed
0
Review items
0
False positives ignored
Risk Factors
⚙️ External commands (41)
SKILL.md:29-59 SKILL.md:59-70 SKILL.md:70-93 SKILL.md:93-109 SKILL.md:109-140 SKILL.md:140-151 SKILL.md:151-186 SKILL.md:186-188 SKILL.md:188-227 SKILL.md:227-246 SKILL.md:246-257 SKILL.md:257-305 SKILL.md:305-321 SKILL.md:321-338 SKILL.md:338-347 SKILL.md:347-349 SKILL.md:349-358 SKILL.md:358-376 SKILL.md:376-466 SKILL.md:466-480 SKILL.md:480-481 SKILL.md:481-484 SKILL.md:484-485 SKILL.md:485-488 SKILL.md:488-491 SKILL.md:491-492 SKILL.md:492-556 SKILL.md:556-561 SKILL.md:561-582 SKILL.md:582-586 SKILL.md:586-617 SKILL.md:617-621 SKILL.md:621-627 SKILL.md:627-663 SKILL.md:663-667 SKILL.md:667-674 SKILL.md:674-700 SKILL.md:700-704 SKILL.md:704-724 SKILL.md:724-728 SKILL.md:728-733
🌐 Network access (12)
🔑 Env variables (2)
No confirmed security findings were detected by the latest completed static and semantic audit. This does not prove the skill has no side effects.
Audited by: codex View Audit History →
Share & cite this report
Share the versioned assessment report, neutral badge, embed card, and citations. Skillstore reports evidence without deciding whether this Skill is safe.
Copy report link
https://skillstore.io/skills/awais68-api-client/audits/9?utm_source=security_passport&utm_medium=share&utm_campaign=versioned_reportMarkdown badge
[](https://skillstore.io/skills/awais68-api-client?utm_source=security_passport_badge)HTML badge
<a href="https://skillstore.io/skills/awais68-api-client?utm_source=security_passport_badge"><img src="https://skillstore.io/badges/skills/awais68-api-client/security.svg" alt="Skillstore security assessment" loading="lazy"></a>Embed card
<iframe src="https://skillstore.io/embed/skills/awais68-api-client.html" title="Skillstore Security Assessment" sandbox="allow-popups allow-popups-to-escape-sandbox" loading="lazy" referrerpolicy="no-referrer" width="420" height="180"></iframe>Academic citations (APA · BibTeX · CFF)
APA citation
Awais68. (2026). api-client security audit report (audit version 9) [Author version unspecified]. Skillstore. https://skillstore.io/skills/awais68-api-client/audits/9BibTeX citation
@techreport{awais68-awais68-api-client-2026,
author = {Awais68},
title = {api-client security audit report (audit version 9)},
institution = {Skillstore},
year = {2026},
number = {9},
url = {https://skillstore.io/skills/awais68-api-client/audits/9},
note = {Author version unspecified}
}CITATION.cff
cff-version: 1.2.0
message: "If you use this Skill, cite its author and this versioned security audit report."
title: "api-client security audit report (audit version 9)"
version: "unspecified"
type: report
authors:
- name: "Awais68"
date-released: "2026-07-06"
url: "https://skillstore.io/skills/awais68-api-client/audits/9"
identifiers:
- type: other
value: "skillstore:awais68-api-client:audit:9"
description: "Skillstore immutable audit report identifier"
Skillstore Score
Why this score Evidence Confidence: High 55
Architecture
85
Maintainability
87
Content
70
Community
74
Spec Compliance
What You Can Build
Create a React API Layer
Set up shared API clients, query providers, and reusable hooks for a new frontend project.
Add Authenticated Requests
Attach JWT tokens, refresh expired sessions, and redirect users when authentication fails.
Standardize Data Fetching
Document consistent caching, validation, error handling, pagination, and optimistic update patterns.
Try These Prompts
Set Up Basics
Set up a typed API client for my React app using TanStack Query and Axios. Include caching defaults, retries, and provider setup.
Add JWT Handling
Add JWT request headers and 401 refresh handling to my Axios API client. Use my existing auth store for session, refresh, and sign-out actions.
Validate Responses
Create reusable API hooks that validate responses with Zod schemas, show useful error messages, and return typed data to components.
Optimize Complex Flows
Design paginated queries, optimistic mutations, offline detection, and cancelable requests for a production React API layer.
Best Practices
- Keep API base URLs configurable and review production values before release.
- Validate server responses before trusting data in UI components.
- Centralize auth, errors, retries, and cache invalidation to avoid inconsistent request behavior.
Avoid
- Do not scatter raw Axios calls across components when shared hooks can enforce consistent behavior.
- Do not store private secrets in public client environment variables.
- Do not skip rollback handling for optimistic mutations that can fail.
Frequently Asked Questions
What frameworks does this skill target?
It targets React and Next.js projects that use TypeScript, TanStack Query, Axios, and Zod.
Does it generate a complete backend API?
No. It focuses on frontend API client patterns and assumes the backend contract already exists.
Can it work without JWT authentication?
Yes. You can omit the interceptor and refresh sections when your API does not require bearer tokens.
Does it support response validation?
Yes. The examples use Zod schemas to validate API responses and derive TypeScript types.
How does it handle failed requests?
It recommends retry defaults, status-specific error messages, toast notifications, and redirect behavior for failed authentication.
Is this skill safe to use with Claude, Codex, and Claude Code?
Yes. It is documentation guidance for API client implementation and does not include executable helper scripts.