rate-limit-budget — independently scanned and version-tracked by SaferSkills.
SaferSkills independently audited rate-limit-budget (Agent Skill) and scored it 100/100 (green). The audit ran 55 deterministic rules across Security, Supply Chain, Maintenance, Transparency, and Community; it found 0 high-severity and 0 lower-severity findings. The full rule-by-rule trace and per-finding evidence are below. Free, methodology-open.
Findings & checks · 0 flagged
Every scanned point with the score it earned and what moved between them.
First recorded scan — no prior version to compare against.
The primary manifest — the file an agent reads to learn what this artifact does.
Use this skill when a run hammers an API and you want to pace it - smooth bursts to a steady rate so you stop earning 429s, and stop the whole run once a per-run call/credit budget is spent so a free-tier monthly quota survives. It is a token-bucket pacer: acquire() blocks just long enough to stay under the configured rate, and a separate budget counter raises once the run hits its cap. This is the teaching version; for the production library wired to a specific provider, see the cross-linked helius-rate-limiter repo.
http-retry-session) is enough.User input:
I call an API once per token and there are 400 of them. Keep it under 5 req/sec and never make more than 300 calls in one run.Output:
# Copy assets/budget.py into your project, then:
from budget import RateBudget, BudgetExceeded
pacer = RateBudget(rate_per_sec=5, burst=5, max_calls=300)
for token in tokens:
try:
pacer.acquire() # blocks just enough to hold 5 req/sec
except BudgetExceeded:
print("hit the per-run call budget; stopping early")
break
call_api(token)
print(pacer.stats()) # {"calls": 300, "remaining": 0, ...}The pacer smooths bursts to the target rate and stops the run cleanly at the budget instead of discovering the quota is gone via a wall of 429s.
rate_per_sec to the provider's documented limit (with headroom); burst is how many you may fire back-to-back.acquire() immediately before each call - it sleeps only when you are ahead of schedule.max_calls (or max_cost with a per-call weight) so a runaway loop cannot drain a monthly quota.BudgetExceeded and stop gracefully - log what is left to do so the next run resumes, do not crash.http-retry-session: pacing prevents most 429s, retry handles the rare one that slips through.For the production-hardened library tied to a real provider, see baronguyen001/helius-rate-limiter.
Reference: assets/budget.py.
Distilled from production use across the author's automation projects. v1.0.0. See also: [[http-retry-session]], [[proxy-rotator]], [[gemini-flash-budget]].
→ Build the full runnable bot with Trawlkit.
~30 seconds. Free. No account. Every finding cites a rule and a line of evidence.