api-integration-patterns

Safe API and CLI integrations use argument arrays instead of shell strings to prevent command injection. This Skill provides patterns for secure subprocess calls, GitHub CLI invocation, and authenticated API requests that enforce argument-array syntax and validate inputs before execution.

Manage GitHub CLI authentication through environment variables and implement rate limiting with retry logic and exponential backoff. This Skill covers credential validation patterns, timeout handling, and retry strategies that work with gh CLI commands and external APIs.

Retry logic with exponential backoff automatically resends failed requests with increasing delays, preventing overwhelming downstream services. This Skill provides proven patterns for timeout handling and retry configuration applicable to both CLI tools and HTTP APIs.

Yes. This Skill applies to any scenario requiring subprocess safety, GitHub CLI integration, authentication management, or rate limiting. The patterns work with existing codebases by replacing unsafe shell calls with argument arrays and adding credential validation via environment variables.

Shell injection (CWE-78), credential exposure, and uncontrolled timeouts are primary risks. This Skill enforces safe argument arrays, whitelist validation for permitted commands, environment-variable credential management, and timely timeout implementation to mitigate these vulnerabilities.