rzyfront/vendix-bruno-test
skills/vendix-bruno-test/SKILL.md
Bruno API testing patterns for Vendix collections, request files, auth inheritance, DTO-aligned payloads, post_response scripting, and pragmatic assertions. Trigger: When creating API tests, editing .bru files, or verifying endpoints.
$ install --global
skillsauthnpx skillsauth add rzyfront/vendix vendix-bruno-testInstall this skill globally with one command. Works with Claude Code, Cursor, and Windsurf.
Security Scan Results
3 of 9 scanners reported clean
Some scanners were skipped, did not run, or reported a non-clean status. Review each row below.
3
Scanners Passed
9
Scanners in report
Clean
TrivyContainer and dependency vulnerability scanner
95%
Clean
SemgrepStatic code analysis for vulnerabilities
95%
Clean
mcp-scan (Snyk)Model Context Protocol security validation
95%
Skipped
Snyk (dep)Open source security scanning
50%
Skipped
Socket.devSupply chain security analysis
50%
Skipped
VirusTotalMulti-engine malware detection
50%
Skipped
CrowdStrikeAdvanced threat intelligence
50%
Skipped
OSV-ScannerOpen Source Vulnerability database check
50%
Skipped
OWASP Dep-Check
50%
Last scanned: May 16, 2026, 5:04 AM138.8s1 file scanned
SKILL.md
- name:
- vendix-bruno-test
- description:
- >
- DTO-aligned payloads, post_response scripting, and pragmatic assertions. Trigger:
- When
- license:
- MIT
- author:
- rzyfront
- version:
- 2.0
- scope:
- [root]
- auto_invoke:
- Creating API tests (Bruno)
Vendix Bruno Test
Source of Truth
bruno/Vendix/collection.bru- Existing request files under
bruno/Vendix/** - Backend DTOs/controllers for payload alignment
Rules
- Organize requests by domain/resource/action under the existing collection structure.
- Default to
auth: inheritunless the endpoint is intentionally public/login. - Align request bodies with backend DTO field names and types exactly.
- Reuse the collection/environment variables already present in the repo.
Assertions
Add assertions when they add value, but do not force a tests block in every request. Current repo usage mixes assertions with post_response scripts and variable capture.
Variable Capture
Current collection patterns commonly use:
post_response {
bru.setVar("created_id", res.body.data.id)
}
Do not document only one legacy vars:post-response style.
URL Reality
Existing requests use a mix of {{url}}, {{baseUrl}}, and http://{{url}}/.... Match the collection conventions already in the target folder instead of introducing a different variable pattern casually.
Related Skills
vendix-backend-apivendix-validationvendix-error-handling
Related Skills
rzyfront/mobile-dev
development
VerifiedTrustedCommunity
Mobile app development rules for Vendix Expo/React Native project. Trigger: When editing, creating, or modifying any file under apps/mobile, or when developing mobile-specific features.
5SKILL.mdUpdated May 29, 2026
rzyfront/vendix-subscription-gate
development
VerifiedTrustedCommunity
Feature gating by store subscription state: global store write guard, AI feature gate, Redis feature resolution, quota consumption, frontend paywall interceptor, banner, and subscription UI states. Trigger: When adding feature gates, paywalls, subscription-based access control, protecting store write operations, AI feature gates, or rollout flags.
5SKILL.mdUpdated May 16, 2026
rzyfront/vendix-saas-billing
testing
VerifiedTrustedCommunity
SaaS subscription billing for Vendix stores: plan pricing, invoices, Wompi platform payments, manual payments, partner commissions, payouts, proration, and dunning. Trigger: When creating SaaS invoices, working with partner rev-share, margin/surcharge pricing, invoice sequence allocation, partner payout batches, subscription payments, manual payments, or dunning flows.
5SKILL.mdUpdated May 16, 2026
rzyfront/vendix-redis-quota
development
VerifiedTrustedCommunity
Periodic quota counters with Redis, UTC period keys, Lua-based idempotent AI quota consumption, request-id deduplication, and post-success consumption. Trigger: When building quota counters, enforcing monthly/daily feature caps, or reusing AI quota patterns for uploads, emails, exports, or rate-limited features.
5SKILL.mdUpdated May 16, 2026