api

A guide to application programming interfaces (APIs), which let programs request data or actions from other software.

In plain words
What is it for?
Use it when working with web services, external data, REST or GraphQL endpoints, and authentication such as bearer tokens, basic authentication, or API keys.
Why use it?
It explains common ways to read, create, update, and delete data through HTTP services, including REST and GraphQL.

Skill for Claude CodeCodex

Install

Getting it into your agent

One page per mod, every tool's command on it. A separate URL per tool would split the same page into five that compete with each other.

agentmods
npx agentmods add skills/dhaupin/vant/vant-skill-api
Any agent
npx skills add dhaupin/vant --skill vant-skill-api
Clone the repo
git clone --depth 1 https://github.com/dhaupin/vant

Made for: Claude Code, Codex.

Per session 6 Skills are progressive disclosure: only the name and description are preloaded; the body loads when the skill is used.
When invoked 269 The whole file, excluding the scripts and references it only reads on demand.
Security scan A 1 finding. Scan, not verified.
Origin original No closer match found in the catalogue.
Token cost

What it costs to keep this loaded

Counted locally with the o200k_base tokenizer, which is exact for GPT models; Claude uses its own tokenizer and its counts differ. Treat this as one consistent yardstick across the catalogue rather than a bill. Prices are per million input tokens.

ModelPer sessionOnce invoked
Fable 5 $0.00006 $0.00269
Opus 5 $0.00003 $0.00134
Sonnet 5 $0.00001 $0.00054
Haiku 4.5 $0.00001 $0.00027

Measured 2d ago against content hash f84bc7daac76, method: parsed. Prices are Anthropic first-party input rates as of 2026-08-30, from the pricing page.

Security

Grade A, and why

api scanned grade A with 1 finding against 26 rules in 11 categories — prompt injection, anti-refusal, data exfiltration, privilege escalation, supply chain, agent snooping, system-prompt leakage, SSRF and excessive agency — measured 2d ago.

A static scan of the body, not an audit. Every finding is printed with the line that produced it so you can judge whether it matters here. A mod is markdown that instructs an agent; that is exactly why what it instructs is worth reading.

Makes network callslowCapability

Not a fault in itself. Listed so you know the mod talks to something, and to what.

const res = await axios.get('https://api.example.com/users')
models/public/skills/vant-skill-api/SKILL.md · 73 lines

What it actually says

API

Application programming interface.


When To Use

  • HTTP services
  • REST/GraphQL
  • External data

What To Do

1. REST

Method What
GET Read
POST Create
PUT Replace
PATCH Update
DELETE Remove

2. Request

// Fetch
const res = await fetch('https://api.example.com/users')
const data = await res.json()

// Node
const axios = require('axios')
const res = await axios.get('https://api.example.com/users')

3. GraphQL

query {
  user(id: 1) {
    name
    email
  }
}

4. Auth

Type Header
Bearer Authorization: Bearer token
Basic Authorization: Basic base64(user:pass)
API Key X-API-Key: key

Role: API Developer
Input: Endpoint
Output: Data

Programmable.

Changes

What this file has done since we first saw it

Hashed on every crawl. A supply-chain change to an agent config is a question of when, not whether, so the history is kept rather than the latest state alone.

  1. 2d ago First seen · 73 lines · 6 tokens per session scan A f84bc7daac76

Subscribe to this mod's changes

api is a skill published in the GitHub repository dhaupin/vant (9 stars, last pushed 3d ago), licensed MIT. It adds 6 tokens to every session and 269 once invoked, about $0.0000 per session on Opus 5. A static security scan graded it A with 1 finding (makes network calls). No closer match exists in the catalogue, so it is treated as the original; first seen 2026-08-31.

Related

Other skills, from other repositories

commit

Atomic git commit with conventional message. Use when the user says "commit", "save my changes", "commit this", or wants to create a git commit. Stages specific files, writes a conventional commit message with body explaining non-obvious decisions. Never uses git add -A.

congchuanling-dot/Cohort · 59 tokens

python-run

Run and debug Python scripts in the project. Use when the user says "run python", "execute this script", "debug this py file", or wants to run/modify a .py file. Handles dependency checks, linting, execution, and error analysis.

congchuanling-dot/Cohort · 56 tokens

skill-packager

Authors Agent Skills v1.0 packages (SKILL.md plus references/scripts), runs packageskill to produce a standards-compliant zip, and uses installskill to add skills from HTTPS, registry, workspace, or an uploaded archive. Use when the user wants to turn documentation, workflows, or code into a portable skill, export a…

vixues/LeAgent · 87 tokens

document-processor

Guidance for processing documents, extracting content, and transforming structured information. Use when the user asks to process, parse, extract, or transform document content such as PDFs, Word files, or spreadsheets.

vixues/LeAgent · 44 tokens

workflow-helper

Guidance for creating, managing and executing workflow automations that chain multiple tools and agents together. Use when the user asks about building, listing, running or composing workflows and automated task pipelines.

vixues/LeAgent · 41 tokens

attendance-signin-sheet

Generate printable attendance / 签到表 spreadsheets from name lists. Use when the user asks for 签到表, attendance sheet, meeting sign-in table, or similar printable roster tables (not full payroll attendance scoring unless asked).

vixues/LeAgent · 51 tokens