Skip to content
Back to skills

Live Api Verification

ASecurity

Close Axl provider-facing verification gaps with bounded, cost-conscious live API tests. Use after implementation or review leaves NEEDS-LIVE-API-VERIFICATION findings or acceptance criteria that MockProvider cannot establish, including effort/thinking mapping, streaming wire behavior, providerMetadata round-trips, structured output, tool calls, usage, or cost accounting.

  • 3 stars
  • 0 votes
  • 0 copies
  • 0 views
  • Added October 18, 2026
ai-agentsbashtestingapi

Works with

  • api

Security analysis

A100/100

Pro scans all 2 files and shows the line behind each finding

Scanned October 18, 2026

npx -y skills add axl-sdk/axl --skill live-api-verification --agent claude-code

Installs into .claude/skills of the current project.

Are you the author of Live Api Verification?

Add the live security badge to your README. It updates with every re-scan.

Security grade badge for Live Api Verification
[![Security: A — Skills Directory](https://www.skillsdirectory.com/api/skills/axl-sdk-live-api-verification/badge)](https://www.skillsdirectory.com/skills/axl-sdk-live-api-verification)

More formats (shields.io, HTML) on the badges page. Keep it an A: scan every change in CI with Pro.

Download with Pro
SKILL.md
---
name: live-api-verification
description: Close Axl provider-facing verification gaps with bounded, cost-conscious live API tests. Use after implementation or review leaves NEEDS-LIVE-API-VERIFICATION findings or acceptance criteria that MockProvider cannot establish, including effort/thinking mapping, streaming wire behavior, providerMetadata round-trips, structured output, tool calls, usage, or cost accounting.
disable-model-invocation: true
---

# Live API Verification

Turn one canonical provider-gated checklist into reproducible evidence. Verify
only the affected scenarios; do not invent a broad provider matrix.

## Establish the boundary

Read `CLAUDE.md`, `.claude/rules/testing.md`, the affected provider rule and
adapter, root/package scripts, and the existing integration test before running
anything. Do not guess commands, supported models, request fields, or what a
mock proves.

Use the smallest verification tier that reaches the real boundary:

- `MockProvider` for SDK-owned transformation and orchestration behavior.
- Existing provider integration tests for request/response wire behavior.
- A new focused integration case only when the affected behavior lacks one.

Never print API keys or `.env` contents. Use only credentials already available
to the worktree. If the required key is absent, record the exact blocked
provider and test instead of weakening the assertion or silently substituting a
different provider.

## Run bounded live checks

Prefer the narrow package integration script when one exists; otherwise use the
repo command documented in `package.json`:

```bash
pnpm -F @axlsdk/<package> test:integration
pnpm test:integration
```

Reuse the existing cheapest supported model and tiny payload conventions. Do
not expand to an unbounded provider/model matrix. Ask before introducing a new
paid provider, materially increasing request count, or exercising an external
tool with real side effects.

For each checklist item:

1. Record the provider/model, exact scenario, expected behavior, and test seam.
2. Confirm the test discriminates against the broken condition.
3. Run the narrowest live command and capture the pass/fail evidence without
   secrets or raw sensitive payloads.
4. If it fails, determine whether the SDK, provider contract, model capability,
   credentials, rate limit, or environment is responsible before changing code.
5. Re-run after fixes and keep residual provider/model limits explicit.

## Close the checklist

Update the plan's in-progress live-API table, or the review-local checklist,
with scenario, provider/model, command/test, result, and remaining risk. Finish
with a direct verdict: live-verified, verified with named provider/model limits,
changes required, or blocked on named credentials/access.

Files in this skill

  • SKILL.md2.7 KB
  • agents/openai.yaml278 B

Attribution

Is this your skill, or is something wrong with this listing? Request removal or report an issue. Author removals are honored within 72 hours.

Comments

Loading comments…

Newsletter

Get the weekly list of safe new skills, and the ones we pulled.