From soundcheck
Detects unsafe consumption of third-party API responses lacking type validation or sanitization. Use when calling external APIs, parsing responses, or handling webhooks.
How this skill is triggered — by the user, by Claude, or both
Slash command
/soundcheck:unsafe-api-consumptionThe summary Claude sees in its skill listing — used to decide when to auto-load this skill
Protects against blindly trusting data from third-party APIs. External API responses
Protects against blindly trusting data from third-party APIs. External API responses can be tampered with (via MITM, compromised provider, or supply-chain attack), contain unexpected types or malicious payloads, or change without notice. Treating external data as trusted leads to injection, deserialization attacks, and business logic bypass.
Flag the vulnerable code, explain the risk, and suggest a fix establishing these properties. Translate to the HTTP client, schema library, and template engine of the audited file — use that stack's documented validation, sanitization, and redirect controls; do not import a recipe from a different stack.
npx claudepluginhub thejefflarson/soundcheck --plugin soundcheckConfigures outbound HTTP clients with strict TLS verification, timeouts, response size limits, and response sanitization for safe consumption of third-party APIs.
<!-- AUTO-GENERATED by export-plugins.py — DO NOT EDIT -->
Enforces API input/output contracts using OpenAPI and JSON Schema to prevent injection, data exposure, and mass assignment attacks. Useful when setting up validation at the gateway or in CI/CD.