Borrowing it
Nothing to install: this file belongs to adarshp14/relay. Take a copy, put it at the same path in your own repository, and replace the rules that are about this project with yours.
curl -O https://raw.githubusercontent.com/adarshp14/relay/main/.agents/skills/wrdn-effect-raw-fetch-boundary/SKILL.mdgit clone --depth 1 https://github.com/adarshp14/relayWrote this? Show the measurements
A badge with what this costs and how it scanned, read live from this page, so it follows the numbers instead of freezing them. Markdown for a README, HTML for a documentation site or a project page.
[](https://agentmods.dev/skills/adarshp14/relay/wrdn-effect-raw-fetch-boundary)<a href="https://agentmods.dev/skills/adarshp14/relay/wrdn-effect-raw-fetch-boundary"><img src="https://agentmods.dev/badge/skills/adarshp14/relay/wrdn-effect-raw-fetch-boundary/github.svg" alt="Measured on agentmods" height="20"></a>Or the 80×15 button, for a site that already has a row of RSS and ATOM ones. Only the verdict fits; the numbers stay here.
<a href="https://agentmods.dev/skills/adarshp14/relay/wrdn-effect-raw-fetch-boundary"><img src="https://agentmods.dev/badge/skills/adarshp14/relay/wrdn-effect-raw-fetch-boundary.svg" alt="Reviewed on agentmods" width="80" height="20"></a>What it costs to keep this loaded
Counted locally with the o200k_base tokenizer, which is exact for GPT models; Claude uses its own tokenizer and its counts differ. Treat this as one consistent yardstick across the catalogue rather than a bill. Prices are per million input tokens.
| Model | Per session | Once invoked |
|---|---|---|
| Fable 5.1 | $0.00038 | $0.00477 |
| Opus 5 | $0.00019 | $0.00238 |
| Sonnet 5 | $0.00008 | $0.00095 |
| Haiku 4.5 | $0.00004 | $0.00048 |
Grade A, and why
wrdn-effect-raw-fetch-boundary scanned grade A with 1 finding against 26 rules in 11 categories — prompt injection, anti-refusal, data exfiltration, privilege escalation, supply chain, agent snooping, system-prompt leakage, SSRF and excessive agency — measured 8d ago.
A static scan of the body, not an audit. Every finding is printed with the line that produced it so you can judge whether it matters here. A mod is markdown that instructs an agent; that is exactly why what it instructs is worth reading.
Makes network callslowCapability
Not a fault in itself. Listed so you know the mod talks to something, and to what.
const response = await fetch(url); This is a copy
97% identical to wrdn-effect-raw-fetch-boundary — 2 lines differ, which has more behind it and is treated as the original. This page carries a canonical link to it rather than competing with it.
What it actually says
HTTP in core SDK and protocol plugins should go through Effect services so tests
can replace real networks with local protocol fixtures or mock HttpClient
layers.
Fix Shape
- Prefer
effect/unstable/httpHttpClientandHttpClientRequestfor ordinary HTTP calls. - Accept a
Layer.Layer<HttpClient.HttpClient>option on plugin/provider code when callers need to inject a test client. - In tests, use real local servers plus
FetchHttpClient.layeror a capturedHttpClientservice from the test layer. - Do not add fetch-shaped abstractions in SDK or plugin seams. If a third-party
library truly only accepts
fetch, keep the adapter in the owning package, name the forced boundary explicitly, and delegate internally to EffectHttpClient. - Do not type new protocol/plugin seams as
typeof globalThis.fetch; keep the ambient runtime boundary out of domain and test APIs. - Do not patch
globalThis.fetch. Replace those tests with a local server,HttpClientlayer, or the approved Effect-backed adapter. - Do not add a broad allowlist entry unless the file is a platform entrypoint or a temporary migration target.
Approved Boundaries
- Worker/handler objects whose public API must expose a
fetchmethod. - Test calls to a worker or Miniflare binding's
.fetch(...)method. - Small adapters for libraries that only accept
fetch, if the implementation delegates to EffectHttpClient. - Browser UI event handlers may remain raw only until app-side boundaries are classified; prefer SDK/client APIs where available.
Bad
const response = await fetch(url);
const fetchImpl = options.fetch ?? globalThis.fetch;
Good
const client = yield * HttpClient.HttpClient;
const response = yield * client.execute(HttpClientRequest.get(url));
const plugin = graphqlPlugin({ httpClientLayer: testHttpClientLayer });
What this file has done since we first saw it
Hashed on every crawl. A supply-chain change to an agent config is a question of when, not whether, so the history is kept rather than the latest state alone.
- 8d ago First seen · 59 lines · 38 tokens per session scan A e7372c09bd40
wrdn-effect-raw-fetch-boundary is a skill published in the GitHub repository adarshp14/relay (0 stars, last pushed 2mo ago), licensed MIT. It adds 38 tokens to every session and 477 once invoked, about $0.0002 per session on Opus 5. A static security scan graded it A with 1 finding (makes network calls). It is 97% identical to wrdn-effect-raw-fetch-boundary, differing in 2 lines, and is treated as a copy.
Other skills, from other repositories
webiny-api-cms-custom-field-type
How to implement a custom CMS field type that integrates with the model builder's fluent API. Covers extending DataFieldBuilder, composing validator interfaces, creating a FieldTypeFactory, registering via DI, and module augmentation for TypeScript autocomplete on the fields() registry.
nodejs-sdk
Type-safe Node.js API client SDK with validation, mocking, retry, and logging. Use when building API clients for Node.js applications.
graphql-api-development
Comprehensive guide for building GraphQL APIs including schema design, queries, mutations, subscriptions, resolvers, type system, error handling, authentication, authorization, caching strategies, and production best practices.
node
Provides domain-specific best practices for Node.js development with TypeScript, covering type stripping, async patterns, error handling, streams, modules, testing, performance, caching, logging, and more. Use when setting up Node.js projects with native TypeScript support, configuring type stripping…
fastify-best-practices
Guides development of Fastify Node.js backend servers and REST APIs using TypeScript or JavaScript. Use when building, configuring, or debugging a Fastify application — including defining routes, implementing plugins, setting up JSON Schema validation, handling errors, optimising performance, managing authentication…
fastapi
FastAPI best practices and conventions. Use when working with FastAPI APIs, Pydantic models, dependencies, streaming responses including Server-Sent Events (SSE), and serving frontend apps. Keeps FastAPI code clean and up to date with the latest features and patterns.