What problem does it solve? Outbound calls to third-party vendor APIs fail in ways that never appear in normal tests: ambiguous timeouts, blind retries on non-idempotent bookings, shared circuit breakers, and state drift between your service and the vendor. This Skill audits the {domain}/client/ package to surface those failure modes before they cause duplicate charges or inconsistent state in production. ## Core Features & Use Cases - Critical hazard detection: Flags blind retries on non-idempotent calls, ambiguous timeouts resolved without vendor reconciliation, and cancel flows that write local state before vendor confirmation. - Resilience pattern review: Checks for missing .timeout() on reactive chains, retries without backoff/jitter/caps, retry filters that don't exclude 4xx, circuit breakers shared across vendors, and unbounded fan-out. - Confidence-calibrated reporting: Distinguishes mechanical findings from judgment-based ones, appending needs manual confirmation markers where the source alone cannot prove the issue. - Use Case: After building a hotel booking integration with a supplier API, run this audit on the booking/client/ package to catch a book() call that retries without an idempotency key — a bug that would double-charge customers under vendor instability. ## Quick Start Ask the assistant to run the vendor integration audit on your client package, for example: audit src/main/java/com/example/booking/client for timeout, retry, and circuit-breaker issues.
