verifying-identity

Validates that API credentials connect to the correct account, environment, or tenant.

Updated Aug 25, 2017
One-click install
npx skills add https://github.com/loki495/dotfiles --skill verifying-identity-loki495
Or copy as Structured Prompt for Agent▼
Please help me install this Agent Skill.
Skill: verifying-identity
Source: https://github.com/loki495/dotfiles/tree/main/ai/skills/verifying-identity
Command: npx skills add https://github.com/loki495/dotfiles --skill verifying-identity-loki495

SYSTEM DOCUMENTATION & REQUIREMENTS

What problem does it solve? A successful API response only proves credentials work for some account, not the correct one. This Skill prevents false verification when multiple accounts, environments, or tenants exist (old vs. new, staging vs. production), stopping integrations from silently targeting the wrong destination. ## Core Features & Use Cases - Independent Identity Confirmation: Asks the user for an identifying fact (account email, product count in a category) and queries the API for the same field to compare. - Mismatch Handling: Treats credentials as wrong until proven otherwise when the compared values do not match, rather than proceeding as if verified. - Fallback Verification: When no distinguishing field is available via the API, directs the user to confirm identity from their own logged-in dashboard instead of re-running calls against possibly-wrong credentials. - Use Case: Before declaring a new OpenCart or payment API integration verified, confirm the store name or product count returned by the API matches the account the user actually intends to connect. ## Quick Start Before marking these API credentials as verified, confirm the account identity by comparing an identifying field from the API with what the user reports.

Frequently Asked Questions about verifying-identity

High-intent search queries and answers about installing and using this skill.

FAQPage Schema
How do I verify API credentials are for the correct account?▼

Ask the user for an identifying fact such as the account email or a product count, then query the API for that same field and compare. If the values do not match, treat the credentials as wrong until proven otherwise.

Why is a 200 OK response not enough to confirm API setup?▼

A successful response only proves the credentials work for some account, not the intended one. With multiple environments like staging and production, valid-looking data can come from the wrong tenant entirely.

What if the API has no field to distinguish accounts?▼

Ask the user to confirm identity independently from a source that can only show the true target, such as their own logged-in dashboard or app, rather than running more API calls against the same possibly-wrong credentials.

When should identity verification be done during integration testing?▼

Verify identity before declaring credentials or config verified, especially when there is known history of multiple accounts or environments, such as old versus new accounts or a prior attempt at the same integration.

What are the limitations of API-based identity verification?▼

It only works when the API exposes a distinguishing field the user can independently confirm. Without such a field, verification depends on the user checking a trusted source like their own dashboard.