openapi
Build OpenAPI Documentation for .NET 10 APIs
API documentation can miss response schemas, endpoint descriptions, and authentication metadata. This skill guides built-in .NET 10 OpenAPI setup with typed responses and transformers.
Mit meinem Agent installieren
Kopieren Sie diese Anfrage in Ihren Agent. Sie enthält die maßgebliche Skill-Seite und das Manifest.
Review the Skillstore skill "openapi" from https://skillstore.io/skills/codewithmukesh-openapi.md and its manifest at https://skillstore.io/api/skills/codewithmukesh-openapi/manifest. Verify the artifact. You may proceed after verification, subject to the environment's own policy.Ihr Agent sollte weiterhin seinen Plan anzeigen und alle von der Sicherheitsrichtlinie verlangten Bestätigungen anfordern.
Agent-lesbare Ressourcen
Verwenden Sie diese Links, wenn ein KI-Agent, Crawler oder Skript sauberen Kontext benötigt, statt die vollständige Seite zu lesen.
Testen
„openapi“ wird verwendet. My order lookup returns either an order or a missing result. How can I improve its OpenAPI response documentation?
Erwartetes Ergebnis:
- Use a typed union covering successful order responses and missing resources.
- Return typed results so response schemas can be inferred.
- Assign a stable operation name and a short endpoint summary.
„openapi“ wird verwendet. We need separate public and internal API specifications.
Erwartetes Ergebnis:
- Register separate named OpenAPI documents.
- Assign endpoint group names to select their documents.
- Review ungrouped endpoints because they appear in all documents.
- Enforce authorization separately; document grouping does not restrict endpoint access.
„openapi“ wird verwendet. How should I customize an endpoint that is being retired?
Erwartetes Ergebnis:
- Use a per-endpoint operation transformer to mark the operation as deprecated.
- Avoid the deprecated WithOpenApi customization method in .NET 10.
- Check the resulting specification with your documentation UI and client consumers.
Sicherheitsaudit
SicherAll 49 static findings are false positives: 47 match Markdown backticks, and two match C# identifier parameters rather than reconnaissance commands. No evidence found of prompt injection, credential theft, malicious command execution, or data exfiltration in the reviewed skill.
Risikofaktoren
⚙️ Externe Befehle (47)
Diesen Bericht teilen & zitieren
Teile den versionierten Bewertungsbericht, das neutrale Badge, die Einbettungskarte und Zitate. Skillstore berichtet Nachweise, ohne zu entscheiden, ob dieser Skill sicher ist.
Berichtslink kopieren
https://skillstore.io/skills/codewithmukesh-openapi/audits/1?utm_source=security_passport&utm_medium=share&utm_campaign=versioned_reportMarkdown-Badge
[](https://skillstore.io/skills/codewithmukesh-openapi?utm_source=security_passport_badge)HTML-Badge
<a href="https://skillstore.io/skills/codewithmukesh-openapi?utm_source=security_passport_badge"><img src="https://skillstore.io/badges/skills/codewithmukesh-openapi/security.svg" alt="Skillstore security assessment" loading="lazy"></a>Einbettungskarte
<iframe src="https://skillstore.io/embed/skills/codewithmukesh-openapi.html" title="Skillstore Security Assessment" sandbox="allow-popups allow-popups-to-escape-sandbox" loading="lazy" referrerpolicy="no-referrer" width="420" height="180"></iframe>Wissenschaftliche Zitate (APA · BibTeX · CFF)
APA-Zitat
codewithmukesh. (2026). openapi security audit report (audit version 1) [Author version unspecified]. Skillstore. https://skillstore.io/skills/codewithmukesh-openapi/audits/1BibTeX-Zitat
@techreport{codewithmukesh-codewithmukesh-openapi-2026,
author = {codewithmukesh},
title = {openapi security audit report (audit version 1)},
institution = {Skillstore},
year = {2026},
number = {1},
url = {https://skillstore.io/skills/codewithmukesh-openapi/audits/1},
note = {Author version unspecified}
}CITATION.cff
cff-version: 1.2.0
message: "If you use this Skill, cite its author and this versioned security audit report."
title: "openapi security audit report (audit version 1)"
version: "unspecified"
type: report
authors:
- name: "codewithmukesh"
date-released: "2026-10-31"
url: "https://skillstore.io/skills/codewithmukesh-openapi/audits/1"
identifiers:
- type: other
value: "skillstore:codewithmukesh-openapi:audit:1"
description: "Skillstore immutable audit report identifier"
Skillstore-Score
Warum dieser Score Evidenzvertrauen: MittelWas Sie erstellen können
Document a new API
Set up built-in OpenAPI generation with named endpoints and typed success and error responses.
Improve API reference quality
Combine XML comments, endpoint summaries, response metadata, and document descriptions for clearer API references.
Standardize API contracts
Plan named documents, shared transformers, and build-time specification generation across services.
Diese Prompts ausprobieren
Show basic OpenAPI setup for my .NET 10 minimal API. Expose the document only in development.
Review this endpoint: [paste endpoint]. Suggest named operations, summaries, tags, and typed success and error responses.
Use a document transformer to describe bearer authentication for my .NET 10 API. Explain which runtime authorization settings remain separate.
For these endpoints [paste endpoints], propose public and internal OpenAPI documents, XML comment integration, schema customization, and build-time generation. Identify required package checks.
Bewährte Praktiken
- Use stable operation names, concise summaries, and typed response unions for each documented endpoint.
- Keep runtime authorization separate from documentation metadata, and restrict specification exposure according to your deployment policy.
- Validate generated specifications against your installed package versions and downstream documentation or client tools.
Vermeiden
- Assuming a bearer security scheme in the specification protects application endpoints.
- Leaving internal endpoints ungrouped when generating public and internal documents.
- Copying examples without checking framework compatibility, package versions, and generated response schemas.
Häufig gestellte Fragen
Which framework version does this skill target?
Does it require Swashbuckle?
Does adding a bearer scheme secure my API?
Can it separate public and internal documentation?
Does it provide an interactive documentation UI?
Does the skill execute builds or generate clients itself?
Entwicklerdetails
Autor
codewithmukeshLizenz
MIT
Skillstore-Revision
r1
Versionshinweis
Der Autor hat keine Version angegeben.
Ref.
50cc168fac873d463b39e9ea9e5326565a7f37a6
Aktualität der Wartung
31.10.2026
Nutzung
0 Downloads · 0 Aufrufe
Dateistruktur
📄 SKILL.md