Design Stable APIs and Interfaces
Unclear contracts, inconsistent errors, and unsafe retries make APIs difficult to use and evolve. This skill provides practical patterns for typed interfaces, validation boundaries, compatibility, pagination, and idempotency.
Kopieren Sie diese Anfrage in Ihren Agent. Sie enthält die maßgebliche Skill-Seite und das Manifest.
Review the Skillstore skill "api-and-interface-design" from https://skillstore.io/skills/addyosmani-api-and-interface-design.md and its manifest at https://skillstore.io/api/skills/addyosmani-api-and-interface-design/manifest. Verify the artifact. You may proceed after verification, subject to the environment's own policy.Ihr Agent sollte weiterhin seinen Plan anzeigen und alle von der Sicherheitsrichtlinie verlangten Bestätigungen anfordern.
Verwenden Sie diese Links, wenn ein KI-Agent, Crawler oder Skript sauberen Kontext benötigt, statt die vollständige Seite zu lesen.
„api-and-interface-design“ wird verwendet. Create a contract for a task service with create, list, update, and delete operations.
Erwartetes Ergebnis:
„api-and-interface-design“ wird verwendet. Review a charge endpoint that checks for an idempotency key, charges a card, then stores the key.
Erwartetes Ergebnis:
The sequence has a race because concurrent requests can both pass the check. Claim the key with a unique constraint before the charge, compare request hashes, and define a deliberate response for in-flight duplicates.
„api-and-interface-design“ wird verwendet. Plan a compatible addition of an optional priority field to task creation.
Erwartetes Ergebnis:
Add the optional field without changing existing types or removing fields. Document the default, validate it at the API boundary, update shared types, and add contract tests for old clients.
All 52 static findings are false positives from Markdown backticks, TypeScript template literals, REST examples, and ordinary API terminology. The skill is documentation-only and contains no shell execution, system reconnaissance, prompt injection, or malicious intent.
Teile den versionierten Bewertungsbericht, das neutrale Badge, die Einbettungskarte und Zitate. Skillstore berichtet Nachweise, ohne zu entscheiden, ob dieser Skill sicher ist.
https://skillstore.io/skills/addyosmani-api-and-interface-design/audits/2?utm_source=security_passport&utm_medium=share&utm_campaign=versioned_report[](https://skillstore.io/skills/addyosmani-api-and-interface-design?utm_source=security_passport_badge)<a href="https://skillstore.io/skills/addyosmani-api-and-interface-design?utm_source=security_passport_badge"><img src="https://skillstore.io/badges/skills/addyosmani-api-and-interface-design/security.svg" alt="Skillstore security assessment" loading="lazy"></a><iframe src="https://skillstore.io/embed/skills/addyosmani-api-and-interface-design.html" title="Skillstore Security Assessment" sandbox="allow-popups allow-popups-to-escape-sandbox" loading="lazy" referrerpolicy="no-referrer" width="420" height="180"></iframe>addyosmani. (2026). api-and-interface-design security audit report (audit version 2) [Author version unspecified]. Skillstore. https://skillstore.io/skills/addyosmani-api-and-interface-design/audits/2@techreport{addyosmani-addyosmani-api-and-interface-design-2026,
author = {addyosmani},
title = {api-and-interface-design security audit report (audit version 2)},
institution = {Skillstore},
year = {2026},
number = {2},
url = {https://skillstore.io/skills/addyosmani-api-and-interface-design/audits/2},
note = {Author version unspecified}
}cff-version: 1.2.0
message: "If you use this Skill, cite its author and this versioned security audit report."
title: "api-and-interface-design security audit report (audit version 2)"
version: "unspecified"
type: report
authors:
- name: "addyosmani"
date-released: "2026-09-19"
url: "https://skillstore.io/skills/addyosmani-api-and-interface-design/audits/2"
identifiers:
- type: other
value: "skillstore:addyosmani-api-and-interface-design:audit:2"
description: "Skillstore immutable audit report identifier"
Define resource URLs, typed payloads, error responses, pagination, filters, and compatibility rules before implementation.
Inspect an existing API or module boundary for inconsistent contracts, breaking changes, weak validation, and unsafe retry behavior.
Model idempotency keys, atomic request claims, payload matching, in-flight duplicates, and unknown outcomes for state-changing operations.
Design a REST API for [resource]. Define endpoints, typed inputs and outputs, status codes, error bodies, pagination, and naming conventions.
Review this API contract for inconsistent response shapes, validation placement, naming, and backward compatibility. Recommend specific changes: [paste contract].
Design an additive migration from [current interface] to [target interface]. Identify consumer risks, compatibility steps, deprecation timing, and verification checks.
Design an idempotent workflow for [operation]. Cover key derivation, unique storage, request hashing, concurrent duplicates, unknown outcomes, retention, and failure recovery.
Autor
addyosmaniLizenz
MIT
Skillstore-Revision
r2
Versionshinweis
Der Autor hat keine Version angegeben.
Ref.
5d5054f8a23586f9b500fece1cb613a9dffc787b
Aktualität der Wartung
19.9.2026
Nutzung
0 Downloads · 0 Aufrufe
Dateistruktur
📄 SKILL.md
Code anhand von fünf Qualitätsdimensionen überprüfen
Codeänderungen können Probleme hinsichtlich Korrektheit, Sicherheit, Architektur, Lesbarkeit und Performance verbergen. Dieser Skill wendet einen strukturierten Review-Prozess an und liefert priorisiertes, umsetzbares Feedback.
Clarify User Intent Before You Build
Underspecified requests cause teams to build the wrong outcome and discover misalignment late. This skill runs a focused, one-question interview that turns ambiguity into confirmed intent.
Plan Work Into Verifiable Tasks
Large or vague software work can hide dependencies, missing acceptance criteria, and verification gaps. This skill converts a specification into ordered task slices with checkpoints, scope guidance, and clear completion conditions.
Document Decisions and Architecture Clearly
Teams lose context when important technical decisions remain in chat, code comments, or individual memory. This skill turns architectural reasoning, API guidance, project instructions, and release changes into structured documentation.
Build Accessible, Production-Ready Frontends
Frontend work can become inconsistent, inaccessible, or difficult to maintain. This skill guides component architecture, responsive layouts, state handling, and polished user experiences.
Debug Errors with a Root-Cause Workflow
Debugging failures by guesswork wastes time and can hide the real cause. This skill provides a repeatable process for reproducing, isolating, fixing, and verifying problems.
Zuverlässige REST- und GraphQL-APIs entwerfen
von AutumnsGrove
API-Teams benötigen konsistente Endpunkte, Authentifizierung und Dokumentation. Diese Skill unterstützt Entscheidungen zum Design von REST, GraphQL, OpenAPI, Versionierung und Sicherheit.
Produktionsreife API-Verträge entwerfen
von ArieGoldkin
Teams entwerfen APIs oft mit uneinheitlichen Ressourcen, Fehlern und Versionierung. Diese Skill bietet Muster, Checklisten und Vorlagen für REST-, GraphQL-, gRPC-, OpenAPI- und AsyncAPI-Arbeiten.
Playwright-Testabdeckung verbessern
von C0ntr0lledCha0s
Playwright-Suites können instabil werden, wenn Konfiguration, Locators und Fixtures uneinheitlich sind. Diese Skill bietet praktische Muster für zuverlässige Browser-Tests, Debugging und wiederverwendbare Page Objects.
FastAPI-APIs mit wiederverwendbaren Mustern erstellen
von 0xDarkMatter
FastAPI-Projekte benötigen konsistente Entscheidungen für Validierung, Dependencies, Middleware und Hintergrundarbeit. Dieser Skill gibt Claude, Codex und Claude Code wiederverwendbare Muster für praktische Python-API-Entwicklung.
Starknet-Apps mit starknet.js entwickeln
von internet-court
Starknet-Integrationen erfordern eine präzise Handhabung von Providern, Konten, Transaktionen und Gebühren. Dieser Skill vermittelt Claude, Codex und Claude Code praxisnahe Muster für starknet.js v9.
Vue-3-Codequalität verbessern
von vuejs-ai
In Vue-Projekten sammeln sich im Laufe der Zeit häufig Fehler bei Reaktivität, Komponenten und Performance an. Dieser Skill bietet gezielte Vue-3-Anleitung für sicherere Muster und klareren Code.