Habilidades openapi
📦

openapi

Revisión del contenido r1 Seguro ⚙️ Comandos externos

Build OpenAPI Documentation for .NET 10 APIs

API documentation can miss response schemas, endpoint descriptions, and authentication metadata. This skill guides built-in .NET 10 OpenAPI setup with typed responses and transformers.

Compatible con: Claude Codex Code(CC)
Maintain this Skill? Claim it 🥉 78 Bronce

Instalar con mi Agente

Copia esta solicitud en tu Agente. Incluye la página canónica del Skill y el manifiesto.

Solicitud de agente
Review the Skillstore skill "openapi" from https://skillstore.io/skills/codewithmukesh-openapi.md and its manifest at https://skillstore.io/api/skills/codewithmukesh-openapi/manifest. Verify the artifact. You may proceed after verification, subject to the environment's own policy.

Tu Agente debe seguir mostrando su plan y solicitar cualquier confirmación exigida por la política de seguridad.

Recursos legibles por agentes

Usa estos enlaces cuando un agente de IA, crawler o script necesite contexto limpio en vez de leer la página completa.

Pruébalo

Usando "openapi". My order lookup returns either an order or a missing result. How can I improve its OpenAPI response documentation?

Resultado esperado:

  • Use a typed union covering successful order responses and missing resources.
  • Return typed results so response schemas can be inferred.
  • Assign a stable operation name and a short endpoint summary.

Usando "openapi". We need separate public and internal API specifications.

Resultado esperado:

  • Register separate named OpenAPI documents.
  • Assign endpoint group names to select their documents.
  • Review ungrouped endpoints because they appear in all documents.
  • Enforce authorization separately; document grouping does not restrict endpoint access.

Usando "openapi". How should I customize an endpoint that is being retired?

Resultado esperado:

  • Use a per-endpoint operation transformer to mark the operation as deprecated.
  • Avoid the deprecated WithOpenApi customization method in .NET 10.
  • Check the resulting specification with your documentation UI and client consumers.

Auditoría de seguridad

Seguro

All 49 static findings are false positives: 47 match Markdown backticks, and two match C# identifier parameters rather than reconnaissance commands. No evidence found of prompt injection, credential theft, malicious command execution, or data exfiltration in the reviewed skill.

1
Archivos escaneados
288
Líneas analizadas
0
Elementos de revisión
0
Falsos positivos ignorados
La auditoría estática y semántica completada más reciente no detectó hallazgos de seguridad confirmados. Esto no demuestra que el skill no tenga efectos secundarios.
Auditado por: codex
Compartir y citar este informe

Comparte el informe de evaluación versionado, la insignia neutral, la tarjeta insertable y las citas. Skillstore presenta evidencias sin decidir si este Skill es seguro.

Abrir el informe versionado
Evaluación de seguridad

Copiar enlace del informe

https://skillstore.io/skills/codewithmukesh-openapi/audits/1?utm_source=security_passport&utm_medium=share&utm_campaign=versioned_report

Insignia Markdown

[![Skillstore security assessment](https://skillstore.io/badges/skills/codewithmukesh-openapi/security.svg)](https://skillstore.io/skills/codewithmukesh-openapi?utm_source=security_passport_badge)

Insignia HTML

<a href="https://skillstore.io/skills/codewithmukesh-openapi?utm_source=security_passport_badge"><img src="https://skillstore.io/badges/skills/codewithmukesh-openapi/security.svg" alt="Skillstore security assessment" loading="lazy"></a>

Tarjeta para insertar

<iframe src="https://skillstore.io/embed/skills/codewithmukesh-openapi.html" title="Skillstore Security Assessment" sandbox="allow-popups allow-popups-to-escape-sandbox" loading="lazy" referrerpolicy="no-referrer" width="420" height="180"></iframe>
Citas académicas (APA · BibTeX · CFF)

Cita APA

codewithmukesh. (2026). openapi security audit report (audit version 1) [Author version unspecified]. Skillstore. https://skillstore.io/skills/codewithmukesh-openapi/audits/1

Cita BibTeX

@techreport{codewithmukesh-codewithmukesh-openapi-2026, author = {codewithmukesh}, title = {openapi security audit report (audit version 1)}, institution = {Skillstore}, year = {2026}, number = {1}, url = {https://skillstore.io/skills/codewithmukesh-openapi/audits/1}, note = {Author version unspecified} }

CITATION.cff

cff-version: 1.2.0 message: "If you use this Skill, cite its author and this versioned security audit report." title: "openapi security audit report (audit version 1)" version: "unspecified" type: report authors: - name: "codewithmukesh" date-released: "2026-10-31" url: "https://skillstore.io/skills/codewithmukesh-openapi/audits/1" identifiers: - type: other value: "skillstore:codewithmukesh-openapi:audit:1" description: "Skillstore immutable audit report identifier"

Puntuación de Skillstore

Por qué esta puntuación Confianza de la evidencia: Medio
55
Arquitectura
85
Mantenibilidad
87
Contenido
65
Comunidad
91
Cumplimiento de la especificación

Lo que puedes crear

Document a new API

Set up built-in OpenAPI generation with named endpoints and typed success and error responses.

Improve API reference quality

Combine XML comments, endpoint summaries, response metadata, and document descriptions for clearer API references.

Standardize API contracts

Plan named documents, shared transformers, and build-time specification generation across services.

Prueba estos prompts

Start with built-in OpenAPI
Show basic OpenAPI setup for my .NET 10 minimal API. Expose the document only in development.
Improve endpoint metadata
Review this endpoint: [paste endpoint]. Suggest named operations, summaries, tags, and typed success and error responses.
Document bearer authentication
Use a document transformer to describe bearer authentication for my .NET 10 API. Explain which runtime authorization settings remain separate.
Plan document generation
For these endpoints [paste endpoints], propose public and internal OpenAPI documents, XML comment integration, schema customization, and build-time generation. Identify required package checks.

Mejores prácticas

  • Use stable operation names, concise summaries, and typed response unions for each documented endpoint.
  • Keep runtime authorization separate from documentation metadata, and restrict specification exposure according to your deployment policy.
  • Validate generated specifications against your installed package versions and downstream documentation or client tools.

Evitar

  • Assuming a bearer security scheme in the specification protects application endpoints.
  • Leaving internal endpoints ungrouped when generating public and internal documents.
  • Copying examples without checking framework compatibility, package versions, and generated response schemas.

Preguntas frecuentes

Which framework version does this skill target?
The examples target .NET 10 and built-in ASP.NET Core OpenAPI support.
Does it require Swashbuckle?
No. It focuses on built-in OpenAPI registration, endpoint mapping, and transformers.
Does adding a bearer scheme secure my API?
No. A security scheme describes authentication in the specification. Configure runtime authentication and authorization separately.
Can it separate public and internal documentation?
It shows named documents and endpoint grouping. Ungrouped endpoints appear in all documents, so review the generated specifications.
Does it provide an interactive documentation UI?
It recommends Scalar but does not provide a complete UI setup workflow.
Does the skill execute builds or generate clients itself?
No. It provides guidance and examples. Build-time generation requires project configuration; client generators are recommendations rather than bundled tools.

Detalles del desarrollador

Licencia

MIT

Revisión de Skillstore

r1

Aviso de versión

El autor no declaró una versión.

Ref.

50cc168fac873d463b39e9ea9e5326565a7f37a6

Actualidad del mantenimiento

31/10/2026

Uso

0 descargas · 0 vistas

Estructura de archivos

📄 SKILL.md

Más de codewithmukesh

Ver todo
Ver todo