Caido SDK API Validation

Valid API Usage

Always use documented Caido SDK APIs directly without runtime checks or validation.

• Good

  sdk.window.showToast("Message", { variant: "error" });
  sdk.backend.myFunction();
  sdk.commands.register("my-command", { name: "Command", run: () => {} });
  

• Bad (NEVER do this)

  if ("showToast" in sdk.window && typeof sdk.window.showToast === "function") {
    sdk.window.showToast("Message");
  }
  

Rules

1. Never use runtime API existence checks (typeof, in operator)
2. Never assume undocumented SDK methods exist
3. If unsure about an API, ask for clarification rather than guessing

The SDK is typed and guaranteed to have the documented methods available.