Getting it into your agent
One page per mod, every tool's command on it. A separate URL per tool would split the same page into five that compete with each other.
npx skills add fuzhengwei/xfg-skills-template --skill api-integrationgit clone --depth 1 https://github.com/fuzhengwei/xfg-skills-templateWrote this? Show the measurements
A badge with what this costs and how it scanned, read live from this page, so it follows the numbers instead of freezing them. Markdown for a README, HTML for a documentation site or a project page.
[](https://agentmods.dev/skills/fuzhengwei/xfg-skills-template/api-integration)<a href="https://agentmods.dev/skills/fuzhengwei/xfg-skills-template/api-integration"><img src="https://agentmods.dev/badge/skills/fuzhengwei/xfg-skills-template/api-integration/github.svg" alt="Measured on agentmods" height="20"></a>Or the 80×15 button, for a site that already has a row of RSS and ATOM ones. Only the verdict fits; the numbers stay here.
<a href="https://agentmods.dev/skills/fuzhengwei/xfg-skills-template/api-integration"><img src="https://agentmods.dev/badge/skills/fuzhengwei/xfg-skills-template/api-integration.svg" alt="Reviewed on agentmods" width="80" height="20"></a>What it costs to keep this loaded
Counted locally with the o200k_base tokenizer, which is exact for GPT models; Claude uses its own tokenizer and its counts differ. Treat this as one consistent yardstick across the catalogue rather than a bill. Prices are per million input tokens.
| Model | Per session | Once invoked |
|---|---|---|
| Fable 5.1 | $0.00053 | $0.00715 |
| Opus 5.5 | $0.00021 | $0.00286 |
| Sonnet 5.5 | $0.00011 | $0.00143 |
| Haiku 4.5 | $0.00005 | $0.00072 |
Grade B, and why
api-integration scanned grade B with 2 findings against 26 rules in 11 categories — prompt injection, anti-refusal, data exfiltration, privilege escalation, supply chain, agent snooping, system-prompt leakage, SSRF and excessive agency — measured 2mo ago.
A static scan of the body, not an audit. Every finding is printed with the line that produced it so you can judge whether it matters here. A mod is markdown that instructs an agent; that is exactly why what it instructs is worth reading.
Sends data to an external URLmediumData exfiltration
A POST to an outside endpoint may be telemetry or may be exfiltration; either way the mod talks to somewhere, and you should know where.
response = requests.post( "https://api.example.com/v1/users", Makes network callslowCapability
Not a fault in itself. Listed so you know the mod talks to something, and to what.
response = requests.get( What it actually says
API 集成技能
帮助 Agent 正确调用 REST API,处理认证、重试和错误。
请求构建
使用 requests 库(推荐)
import requests
# GET 请求
response = requests.get(
"https://api.example.com/v1/users",
headers={"Authorization": f"Bearer {token}"},
params={"page": 1, "per_page": 20},
timeout=30
)
# POST 请求
response = requests.post(
"https://api.example.com/v1/users",
headers={"Authorization": f"Bearer {token}", "Content-Type": "application/json"},
json={"name": "张三", "email": "[email protected]"},
timeout=30
)
使用 curl(简单场景)
curl -s -X GET \
-H "Authorization: Bearer $TOKEN" \
"https://api.example.com/v1/users?page=1"
认证模式
| 类型 | Header 格式 | 适用场景 |
|---|---|---|
| Bearer Token | Authorization: Bearer <token> |
OAuth 2.0 / JWT |
| API Key | X-API-Key: <key> |
简单 API 密钥 |
| Basic Auth | Authorization: Basic <base64> |
传统认证 |
| HMAC | 自定义 Header | 阿里云/腾讯云 API |
错误处理
- 网络错误:重试最多 3 次,间隔 1/2/4 秒(指数退避)
- 429 Too Many Requests:读取
Retry-AfterHeader,等待后重试 - 5xx 服务端错误:重试最多 2 次
- 4xx 客户端错误:不重试,报告错误详情
from requests.adapters import HTTPAdapter
from urllib3.util.retry import Retry
session = requests.Session()
retries = Retry(total=3, backoff_factor=1,
status_forcelist=[429, 500, 502, 503, 504])
session.mount("https://", HTTPAdapter(max_retries=retries))
响应解析
# 检查状态码
response.raise_for_status()
# 解析 JSON
data = response.json()
# 分页处理
while url:
response = session.get(url, headers=headers, timeout=30)
data = response.json()
results.extend(data.get("items", []))
url = data.get("next_page_url")
Gotchas
- 始终设置
timeout参数,避免请求无限挂起 - 敏感信息(Token、API Key)使用环境变量,不硬编码
- 某些 API 返回的错误信息在 response body 而非 status code
- 分页 API 注意是否有总数限制,避免无限循环
What this file has done since we first saw it
Hashed on every crawl. A supply-chain change to an agent config is a question of when, not whether, so the history is kept rather than the latest state alone.
- 2mo ago First seen · 96 lines · 53 tokens per session scan B 612d77eed9cd
api-integration is a skill published in the GitHub repository fuzhengwei/xfg-skills-template (15 stars, last pushed 5mo ago), licensed Apache-2.0. It adds 53 tokens to every session and 715 once invoked, about $0.0002 per session on Opus 5.5. A static security scan graded it B with 2 findings (sends data to an external url, makes network calls). No closer match exists in the catalogue, so it is treated as the original; first seen 2026-08-30.
api-integration compared with skills from other repositories
| Mod | Type | Stars | Last push | Licence | Scan | Tokens | Works with |
|---|---|---|---|---|---|---|---|
| api-integrationfuzhengwei/xfg-skills-template | Skill | 15 | 5mo ago | Apache-2.0 | B | 53 | Claude Code, Codex |
| mem0-oss-to-platformmem0ai/mem0 | Skill | 68k | 2d ago | Apache-2.0 | A | 217 | Claude Code, Codex |
| azure-mgmt-botservice-dotnetmicrosoft/skills | Skill | 3.2k | yesterday | MIT | A | 78 | Claude Code |
| fastapi-router-pymicrosoft/skills | Skill | 3.2k | yesterday | MIT | A | 46 | Claude Code |
| dev-runtimelangwatch/langwatch | Skill | 5.0k | yesterday | Apache-2.0 | A | 172 | Claude Code |
| api-designericrisco/rsc-harness | Skill | 503 | 2d ago | MIT | A | 105 | Claude Code, Codex |
| migrate-segw-to-raparc-mcp/arc-1 | Skill | 252 | yesterday | MIT | A | 106 | Claude Code |