Skills http-api-cloudbase

📦

http-api-cloudbase

Name: http-api-cloudbase
Author: tencentcloudbase

v2.23.8 Content revision r1 Safe ⚙️ External commands🌐 Network access📁 Filesystem access

Build CloudBase HTTP API Clients

CloudBase teams need reliable raw HTTP integrations when SDKs are unavailable. This skill guides endpoint selection, authentication, OpenAPI lookup, and safe request construction.

Supports: Claude Codex Code(CC)

🥈 80 Silver

Install with my Agent

Copy this request to your Agent. It includes the canonical Skill page and manifest.

Agent request

Review the Skillstore skill "http-api-cloudbase" from https://skillstore.io/skills/tencentcloudbase-http-api-cloudbase.md and its manifest at https://skillstore.io/api/skills/tencentcloudbase-http-api-cloudbase/manifest. Verify the artifact. You may proceed after verification, subject to the environment's own policy.

Your Agent should still show its plan and request any confirmation required by the security policy.

Agent-readable resources

Use these links when an AI agent, crawler, or script needs clean context instead of reading the full page.

Markdown detail GET /skills/tencentcloudbase-http-api-cloudbase.md Signed manifest GET /api/skills/tencentcloudbase-http-api-cloudbase/manifest Signed lockfile GET /api/skills/tencentcloudbase-http-api-cloudbase/lockfile

Test it

Using "http-api-cloudbase". I need to call a CloudBase function from Flutter without an SDK.

Expected outcome:

The assistant selects raw HTTP routing, asks for environment and auth details, then outlines the gateway URL, headers, body, and error handling.

Using "http-api-cloudbase". I need a server script that updates a CloudBase relational table.

Expected outcome:

The assistant requests the OpenAPI spec, confirms the table path, adds an update filter requirement, and describes safe token storage.

Using "http-api-cloudbase". I am unsure whether this task belongs to HTTP API or MCP management.

Expected outcome:

The assistant compares the task against the routing checklist and directs API calls, SDK work, and management actions to the correct workflow.

Security Audit

Safe

v2 • 7/9/2026 Open versioned report

All static findings were adjudicated as false positives after reviewing SKILL.md and checklist.md. The flagged backticks, URLs, relative paths, and API examples are documentation, not executable code or malicious behavior. No prompt injection attempt, covert exfiltration intent, or host reconnaissance instruction was found.

Files scanned

622

Lines analyzed

Review items

False positives ignored

Risk Factors

⚙️ External commands (50)

🌐 Network access (28)

📁 Filesystem access (3)

SKILL.md:31 SKILL.md:32 SKILL.md:33

No confirmed security findings were detected by the latest completed static and semantic audit. This does not prove the skill has no side effects.

Audited by: codex View Audit History →

Share & cite this report

Share the versioned assessment report, neutral badge, embed card, and citations. Skillstore reports evidence without deciding whether this Skill is safe.

Open versioned report

Copy report link

https://skillstore.io/skills/tencentcloudbase-http-api-cloudbase/audits/2?utm_source=security_passport&utm_medium=share&utm_campaign=versioned_report

Markdown badge

[![Skillstore security assessment](https://skillstore.io/badges/skills/tencentcloudbase-http-api-cloudbase/security.svg)](https://skillstore.io/skills/tencentcloudbase-http-api-cloudbase?utm_source=security_passport_badge)

HTML badge

<a href="https://skillstore.io/skills/tencentcloudbase-http-api-cloudbase?utm_source=security_passport_badge"><img src="https://skillstore.io/badges/skills/tencentcloudbase-http-api-cloudbase/security.svg" alt="Skillstore security assessment" loading="lazy"></a>

Embed card

<iframe src="https://skillstore.io/embed/skills/tencentcloudbase-http-api-cloudbase.html" title="Skillstore Security Assessment" sandbox="allow-popups allow-popups-to-escape-sandbox" loading="lazy" referrerpolicy="no-referrer" width="420" height="180"></iframe>

Academic citations (APA · BibTeX · CFF)

APA citation

tencentcloudbase. (2026). http-api-cloudbase security audit report (audit version 2) [Author version 2.23.8]. Skillstore. https://skillstore.io/skills/tencentcloudbase-http-api-cloudbase/audits/2

BibTeX citation

@techreport{tencentcloudbase-tencentcloudbase-http-api-cloudbase-2026,
  author = {tencentcloudbase},
  title = {http-api-cloudbase security audit report (audit version 2)},
  institution = {Skillstore},
  year = {2026},
  number = {2},
  url = {https://skillstore.io/skills/tencentcloudbase-http-api-cloudbase/audits/2},
  note = {Author version 2.23.8}
}

CITATION.cff

cff-version: 1.2.0
message: "If you use this Skill, cite its author and this versioned security audit report."
title: "http-api-cloudbase security audit report (audit version 2)"
version: "2.23.8"
type: report
authors:
  - name: "tencentcloudbase"
date-released: "2026-07-09"
url: "https://skillstore.io/skills/tencentcloudbase-http-api-cloudbase/audits/2"
identifiers:
  - type: other
    value: "skillstore:tencentcloudbase-http-api-cloudbase:audit:2"
    description: "Skillstore immutable audit report identifier"

Skillstore Score

Why this score Evidence Confidence: Medium

Architecture

100

Maintainability

Content

Community

Spec Compliance

What You Can Build

Build Mobile Backend Calls

Use raw HTTP for iOS, Android, Flutter, or React Native clients when a CloudBase SDK is unavailable.

Create Admin Scripts

Prepare server-side HTTP clients for database, function, storage, or AI model API calls.

Review API Routing

Check whether a task belongs to raw HTTP APIs, SDK flows, MCP management, or CloudBase-hosted services.

Try These Prompts

Choose HTTP API Route

Decide whether my CloudBase task should use raw HTTP APIs or an SDK. Ask for missing environment, region, and auth details.

Generate Basic Request

Create a safe curl request for a CloudBase function call using placeholders for env ID, region, and token.

Plan Database Integration

Outline a CloudBase relational database REST flow with auth headers, query filters, response handling, and update safeguards.

Implement OpenAPI-Based Client

Use the CloudBase OpenAPI spec for ai_model to design a non-SDK HTTP client with validation, retries, and secure token handling.

Best Practices

Verify the official OpenAPI spec before choosing endpoints or parameters.
Use API Keys only on trusted servers and keep all bearer tokens protected.
URL encode query values and include filters for update and delete operations.

Avoid

Placing server API keys in client-side mobile or browser code.
Inventing endpoint paths from memory instead of checking OpenAPI.
Using this skill for SDK-supported Web, Node, or mini program flows.

Frequently Asked Questions

What is this skill for?

It helps agents build raw HTTP integrations for official CloudBase platform APIs.

Does it run HTTP requests?

No. It is documentation for generating or reviewing request code and command examples.

Which authentication methods are covered?

It covers AccessToken, API Key, and Publishable Key usage guidance.

Can I use server API keys in clients?

No. Server API keys must stay in trusted server-side environments.

How should endpoints be verified?

Use the CloudBase OpenAPI lookup before writing exact paths, parameters, or schemas.

Does it replace CloudBase SDKs?

No. Use SDK-specific guidance when the target platform has a supported CloudBase SDK.

Developer Details

Author

tencentcloudbase

License

MIT

Author version

v2.23.8

Skillstore revision

Repository

https://github.com/tencentcloudbase/skills/tree/main/skills/http-api

Ref

24b2fe42a456262f3fd0fb3df72e12d9ed2c32ec

Maintenance freshness

7/18/2026

Usage

0 downloads · 0 views

File structure

📄 checklist.md

📄 SKILL.md