Skip to content
Back to skills

Navan Local Dev Loop

ASecurity

Develop Navan integrations against sanitized contract fixtures with networking denied by default. Use when changing adapters, mappings, or reconciliation logic. Trigger with "develop Navan locally", "mock Navan data", or "add Navan fixtures".

  • 2,719 stars
  • 0 votes
  • 0 copies
  • 2 views
  • Added September 21, 2026
ai-agentsdocumentation

Works with

  • claude code

Security analysis

A100/100

Pro scans all 2 files and shows the line behind each finding

Scanned September 21, 2026

npx -y skills add jeremylongshore/claude-code-plugins-plus --skill navan-local-dev-loop --agent claude-code

Installs into .claude/skills of the current project.

Are you the author of Navan Local Dev Loop?

Add the live security badge to your README. It updates with every re-scan.

Security grade badge for Navan Local Dev Loop
[![Security: A — Skills Directory](https://www.skillsdirectory.com/api/skills/jeremylongshore-navan-local-dev-loop-243cff4b/badge)](https://www.skillsdirectory.com/skills/jeremylongshore-navan-local-dev-loop-243cff4b)

More formats (shields.io, HTML) on the badges page. Keep it an A: scan every change in CI with Pro.

Download with Pro
SKILL.md
---
name: navan-local-dev-loop
description: >-
  Develop Navan integrations against sanitized contract fixtures with networking denied by default. Use when changing adapters, mappings, or reconciliation logic. Trigger with "develop Navan locally", "mock Navan data", or "add Navan fixtures".
allowed-tools: Read,Glob,Grep,Write,Edit
argument-hint: "<surface> <fixture-set> <test-command>"
version: 1.9.0
license: MIT
author: Jeremy Longshore <jeremy@intentsolutions.io>
tags: [saas, navan, development]
model: inherit
effort: high
compatibility: "Designed for Claude Code; live or external Navan actions require network access and explicit approval"
---
# Navan Offline Development Loop

## Overview

Develop Navan integrations against sanitized contract fixtures with networking denied by default. This workflow produces an auditable decision or artifact before any live action.

## Prerequisites

- Access to the selected tenant's current Navan Help Center and contracted integration documentation.
- A named business owner and data owner for the travel or expense workflow.
- A non-production evidence set with secrets and traveler data removed.

## Current Contract

Local development should exercise the application-owned contract, not depend on a live tenant. Fixtures must preserve structural edge cases while removing traveler, payment, itinerary, and credential data.

## Authentication

Local tests require no Navan credential. An optional live smoke uses a separate non-production secret and must be explicitly enabled outside the normal test command.

## Instructions

1. Capture a schema from authorized documentation or a sanitized response.
2. Build minimal success, empty, paginated, corrected, denied, throttled, and malformed fixtures.
3. Validate fixtures against local types and sensitivity rules.
4. Run the adapter with networking blocked and a deterministic clock.
5. Exercise mapping, deduplication, checkpoint, and rollback behavior.
6. Keep live smoke configuration separate, bounded, and disabled by default.

## Tool Discipline

Use Read, Glob, and Grep to inspect documentation, schemas, configuration, code, fixtures, and evidence. Use Write and Edit only for approved repository artifacts. Invocation alone does not authorize network access, credentials, traveler or expense data, bookings, payments, policy or identity changes, file transfers, deployments, or deletion.

## Approval Boundaries

Live tenant access, new fixtures derived from real data, dependency changes, and fixture publication require explicit approval.

## Error Handling

- Never commit raw tenant responses.
- A fixture that contains plausible personal data still needs review.
- Fail when an offline test unexpectedly opens a socket.

## Output

Return fixture provenance, covered contracts, test results, network-denial evidence, uncovered fields, and optional live-smoke plan. Identify assumptions, owners, expirations, and evidence gaps explicitly.

## Examples

- Model a late booking correction with synthetic identifiers.
- Test an expense reversal without a real receipt.

## Validation

Scan fixtures for secrets and personal data, run twice for determinism, and verify a network attempt fails. Record expected and observed results, including fail-closed behavior.

## Resources

- [Current first-party evidence map](references/official-docs.md) — recheck dated sources and the selected tenant's in-account contract before relying on mutable endpoints, fields, entitlements, limits, or delivery behavior.
- Record tenant observations as environment-specific evidence, never universal Navan guarantees.

Files in this skill

  • SKILL.md3.5 KB
  • references/official-docs.md1.3 KB

Attribution

Is this your skill, or is something wrong with this listing? Request removal or report an issue. Author removals are honored within 72 hours.

Comments

Loading comments…

Newsletter

Get the weekly list of safe new skills, and the ones we pulled.