api-docs — independently scanned and version-tracked by SaferSkills.
SaferSkills independently audited api-docs (Agent Skill) and scored it 100/100 (green). The audit ran 55 deterministic rules across Security, Supply Chain, Maintenance, Transparency, and Community; it found 0 high-severity and 0 lower-severity findings. The full rule-by-rule trace and per-finding evidence are below. Free, methodology-open.
Findings & checks · 0 flagged
Every scanned point with the score it earned and what moved between them.
First recorded scan — no prior version to compare against.
The primary manifest — the file an agent reads to learn what this artifact does.
Generate production-ready OpenAPI 3.1 specifications and documentation from your codebase.
package.json → Express, NestJS, Fastify, Honorequirements.txt / pyproject.toml → FastAPI, Flask, Django RESTgo.mod → Gin, Echo, Chi, FiberGemfile → Rails APIpom.xml / build.gradle → Spring BootCargo.toml → Axum, Actix-web # Common patterns to search
app.get|post|put|patch|delete # Express/Fastify
@app.route|@router # Flask/FastAPI
@GetMapping|@PostMapping # Spring
router.GET|POST # Gin/Echo
resources|get|post # Rails
@Controller|@Get|@Post # NestJS:id, {id}, <id>)Generate openapi.yaml with:
openapi: 3.1.0
info:
title: <extracted from package.json/pyproject.toml or ask>
version: <from version file or git tag>
description: <from README or generate>
servers:
- url: <detect from env/config or use placeholder>
paths:
/endpoint:
get:
summary: <from docstring or generate>
description: <detailed description>
operationId: <function name>
tags: [<from route grouping>]
parameters: [<extracted>]
requestBody: <if applicable>
responses:
'200':
description: Success
content:
application/json:
schema:
$ref: '#/components/schemas/ResponseType'
example: <generate realistic example>
'400': <validation errors>
'401': <if auth required>
'404': <if path params>
'500': <server error>
security: [<detected auth>]
components:
schemas: <all extracted types>
securitySchemes: <detected auth methods>Based on $ARGUMENTS or default to all:
openapi.yaml):API.md):postman.json):Before finalizing, validate:
npx @redocly/cli lint openapi.yamlOr if not available, validate structure manually.
See reference.md for detailed extraction patterns per framework.
| Argument | Output |
|---|---|
openapi | OpenAPI 3.1 YAML only |
markdown | API.md documentation |
postman | Postman collection JSON |
all (default) | All formats |
html | Redoc-ready HTML |
/api-docs # Auto-detect, generate all formats
/api-docs fastapi openapi # FastAPI project, OpenAPI only
/api-docs express markdown # Express project, Markdown onlyGenerated documentation MUST include:
~30 seconds. Free. No account. Every finding cites a rule and a line of evidence.