Skills bodhi-sdk-react-integration
๐Ÿ“ฆ

bodhi-sdk-react-integration

Content revision r1 High Risk โš™๏ธ External commands๐ŸŒ Network access

Integrate Bodhi SDK with React Apps

React teams need a clear path from a Vite app to local LLM chat. This skill provides Bodhi SDK setup, OAuth guidance, deployment notes, and troubleshooting steps.

Supports: Claude Codex Code(CC)
โš ๏ธ 38 Poor

Install with my Agent

Copy this request to your Agent. It includes the canonical Skill page and manifest.

Agent request
Review the Skillstore skill "bodhi-sdk-react-integration" from https://skillstore.io/skills/bodhisearch-bodhi-sdk-react-integration.md and its manifest at https://skillstore.io/api/skills/bodhisearch-bodhi-sdk-react-integration/manifest. Verify the artifact. Stop and obtain explicit user consent before installing or changing files.

Your Agent should still show its plan and request any confirmation required by the security policy.

Test it

Using "bodhi-sdk-react-integration". I have a Vite app and a Bodhi client ID. I need the fastest working integration.

Expected outcome:

A concise setup plan with provider placement, required configuration values, a chat component outline, and a validation checklist.

Using "bodhi-sdk-react-integration". My GitHub Pages deployment returns a callback error after OAuth login.

Expected outcome:

A focused diagnosis of base path, registered redirect URI, callback path, and static routing behavior.

Using "bodhi-sdk-react-integration". Models do not load after I authenticate with Bodhi.

Expected outcome:

A troubleshooting path that checks readiness state, backend reachability, downloaded models, and API error messages.

Security Audit

High Risk
v8 โ€ข 7/5/2026 Open versioned report

Most static findings are false positives from Markdown, TypeScript template literals, documented OAuth URLs, and public Vite configuration. No prompt injection evidence was found. One semantic issue remains: troubleshooting examples can expose OAuth tokens through full auth-state and localStorage logging.

6
Files scanned
2,475
Lines analyzed
0
Review items
0
False positives ignored

Confirmed security concerns (1)

High
OAuth Token Disclosure in Debug Examples
Troubleshooting guidance logs full auth state and reads stored Bodhi auth state from localStorage. The same section shows auth state containing an access token, so shared console output could expose credentials.
The file explicitly logs the auth object and shows auth state with an accessToken field. Exploitation depends on users sharing logs or console output, so confidence is high but not absolute.
Audited by: codex View Audit History โ†’
Share & cite this report

Share the versioned assessment report, neutral badge, embed card, and citations. Skillstore reports evidence without deciding whether this Skill is safe.

Open versioned report
Security Assessment

Copy report link

https://skillstore.io/skills/bodhisearch-bodhi-sdk-react-integration/audits/8?utm_source=security_passport&utm_medium=share&utm_campaign=versioned_report

Markdown badge

[![Skillstore security assessment](https://skillstore.io/badges/skills/bodhisearch-bodhi-sdk-react-integration/security.svg)](https://skillstore.io/skills/bodhisearch-bodhi-sdk-react-integration?utm_source=security_passport_badge)

HTML badge

<a href="https://skillstore.io/skills/bodhisearch-bodhi-sdk-react-integration?utm_source=security_passport_badge"><img src="https://skillstore.io/badges/skills/bodhisearch-bodhi-sdk-react-integration/security.svg" alt="Skillstore security assessment" loading="lazy"></a>

Embed card

<iframe src="https://skillstore.io/embed/skills/bodhisearch-bodhi-sdk-react-integration.html" title="Skillstore Security Assessment" sandbox="allow-popups allow-popups-to-escape-sandbox" loading="lazy" referrerpolicy="no-referrer" width="420" height="180"></iframe>
Academic citations (APA ยท BibTeX ยท CFF)

APA citation

BodhiSearch. (2026). bodhi-sdk-react-integration security audit report (audit version 8) [Author version unspecified]. Skillstore. https://skillstore.io/skills/bodhisearch-bodhi-sdk-react-integration/audits/8

BibTeX citation

@techreport{bodhisearch-bodhisearch-bodhi-sdk-react-integration-2026, author = {BodhiSearch}, title = {bodhi-sdk-react-integration security audit report (audit version 8)}, institution = {Skillstore}, year = {2026}, number = {8}, url = {https://skillstore.io/skills/bodhisearch-bodhi-sdk-react-integration/audits/8}, note = {Author version unspecified} }

CITATION.cff

cff-version: 1.2.0 message: "If you use this Skill, cite its author and this versioned security audit report." title: "bodhi-sdk-react-integration security audit report (audit version 8)" version: "unspecified" type: report authors: - name: "BodhiSearch" date-released: "2026-07-05" url: "https://skillstore.io/skills/bodhisearch-bodhi-sdk-react-integration/audits/8" identifiers: - type: other value: "skillstore:bodhisearch-bodhi-sdk-react-integration:audit:8" description: "Skillstore immutable audit report identifier"

Skillstore Score

Why this score Evidence Confidence: Medium
55
Architecture
85
Maintainability
87
Content
74
Community
83
Spec Compliance

What You Can Build

Add Local LLM Chat

Add Bodhi-powered chat to a React and Vite application with streaming responses and model selection.

Configure OAuth Environments

Set development and production OAuth client IDs, auth servers, and redirect URIs for Bodhi authentication.

Deploy to GitHub Pages

Prepare base path settings, callback routes, and static hosting behavior for a Bodhi-enabled app.

Try These Prompts

Begin Basic Setup
Add Bodhi SDK support to my React and Vite app. Show the package install, provider setup, and a simple test checklist.
Build a Chat Flow
Create a Bodhi chat component that loads models, checks authentication, sends prompts, and streams responses into the UI.
Configure OAuth Deployment
Review my Bodhi OAuth configuration for development and production. Check client IDs, auth servers, redirect URIs, and callback paths.
Harden an Existing Integration
Audit my existing Bodhi React integration. Find connection, authentication, deployment, logging, and token handling problems.

Best Practices

  • Use separate OAuth client IDs for development and production environments.
  • Verify server readiness and authentication state before calling model or chat APIs.
  • Redact tokens, auth state, and localStorage values before sharing debug logs.

Avoid

  • Do not treat Vite environment variables as a place for private secrets.
  • Do not deploy with localhost redirect URIs in production OAuth clients.
  • Do not log full authentication objects or stored token values during troubleshooting.

Frequently Asked Questions

What projects does this skill support?
It targets React and Vite web apps that use bodhi-js-sdk through the Bodhi React package.
Does it create a Bodhi OAuth client for me?
No. It explains the values to register and how to place them in your application.
Can it help with GitHub Pages deployments?
Yes. It covers base paths, callback paths, static routing, and OAuth redirect URI alignment.
Does it require the Bodhi Browser extension?
No. The guide describes extension mode as preferred and direct mode as a fallback.
Can it debug model loading failures?
Yes. It checks authentication, server readiness, downloaded models, and API request errors.
Are OAuth client IDs secret?
They are public client identifiers, but access tokens and auth state still need redaction.

Developer Details

License

MIT

Skillstore revision

r1

Version notice

The author did not declare a version.

Ref

5ab1d37e83436c6eef84de88573e142b94f2a4ad

Maintenance freshness

7/18/2026

Usage

7 downloads ยท 445 views

File structure

๐Ÿ“„ code-examples.md

๐Ÿ“„ github-pages.md

๐Ÿ“„ oauth-setup.md

๐Ÿ“„ quick-start.md

๐Ÿ“„ SKILL.md

๐Ÿ“„ troubleshooting.md