api-design — independently scanned and version-tracked by SaferSkills.
SaferSkills independently audited api-design (Agent Skill) and scored it 100/100 (green). The audit ran 55 deterministic rules across Security, Supply Chain, Maintenance, Transparency, and Community; it found 0 high-severity and 0 lower-severity findings. The full rule-by-rule trace and per-finding evidence are below. Free, methodology-open.
Findings & checks · 0 flagged
Every scanned point with the score it earned and what moved between them.
First recorded scan — no prior version to compare against.
The primary manifest — the file an agent reads to learn what this artifact does.
!find . -type f \( -name "*.ts" -o -name "*.js" -o -name "*.py" -o -name "*.go" -o -name "*.rs" -o -name "*.java" -o -name "*.rb" -o -name "*.cs" \) -path "*/route*" -o -path "*/controller*" -o -path "*/handler*" -o -path "*/endpoint*" -o -path "*/api*" 2>/dev/null | grep -v node_modules | grep -v vendor | grep -v .git | head -20
!find . -name "openapi*" -o -name "swagger*" -o -name "*.graphql" -o -name "*.gql" -o -name "schema.*" 2>/dev/null | grep -v node_modules | head -10
For each resource, define:
| Method | Endpoint | Description | Auth |
|---|---|---|---|
| GET | /api/v1/{resources} | List all (paginated) | Required |
| GET | /api/v1/{resources}/:id | Get single by ID | Required |
| POST | /api/v1/{resources} | Create new | Required |
| PUT | /api/v1/{resources}/:id | Full update | Required |
| PATCH | /api/v1/{resources}/:id | Partial update | Required |
| DELETE | /api/v1/{resources}/:id | Delete | Required |
For each endpoint, define:
Standard error response format:
{
"error": {
"code": "RESOURCE_NOT_FOUND",
"message": "Human-readable description",
"details": []
}
}Standard HTTP status codes:
200 OK — successful GET/PUT/PATCH201 Created — successful POST204 No Content — successful DELETE400 Bad Request — validation errors401 Unauthorized — missing/invalid auth403 Forbidden — insufficient permissions404 Not Found — resource doesn't exist409 Conflict — duplicate or state conflict422 Unprocessable Entity — valid JSON but semantic errors429 Too Many Requests — rate limited500 Internal Server Error — unexpected failurePagination (cursor or offset):
GET /api/v1/users?page=2&per_page=20
GET /api/v1/users?cursor=abc123&limit=20Filtering:
GET /api/v1/users?status=active&role=adminSorting:
GET /api/v1/users?sort=created_at&order=descOutput an OpenAPI 3.0 spec (YAML) or GraphQL schema as appropriate for the project.
/users not /user)/user-profiles)/api/v1/)~30 seconds. Free. No account. Every finding cites a rule and a line of evidence.