http-retry

AdvisoryAudited by Static analysis on Apr 30, 2026.

Overview

No suspicious patterns detected.

Findings (0)

Artifact-based informational review of SKILL.md, metadata, install specs, static scan signals, and capability signals. ClawScan does not execute the skill or run runtime probes.

What this means

If copied into workflows that perform state-changing HTTP calls, automatic retries could accidentally repeat an action such as creating an order or submitting a transaction.

Why it was flagged

The example retries any HTTP request represented by the supplied options, without documenting method restrictions, idempotency keys, or special handling for mutating operations.

Skill content
const response = await fetch(url, { ...options, signal: controller.signal }); ... if (response.status === 429 || response.status >= 500) { ... continue; }
Recommendation

Use this pattern mainly for idempotent requests, add idempotency keys or explicit safeguards for mutating calls, cap retries, and consider honoring service-specific Retry-After guidance.