Design Stable APIs and Interfaces
Unclear contracts, inconsistent errors, and unsafe retries make APIs difficult to use and evolve. This skill provides practical patterns for typed interfaces, validation boundaries, compatibility, pagination, and idempotency.
이 요청을 에이전트에 복사하세요. 공식 Skill 페이지와 매니페스트가 포함되어 있습니다.
Review the Skillstore skill "api-and-interface-design" from https://skillstore.io/skills/addyosmani-api-and-interface-design.md and its manifest at https://skillstore.io/api/skills/addyosmani-api-and-interface-design/manifest. Verify the artifact. You may proceed after verification, subject to the environment's own policy.에이전트는 계속해서 계획을 표시하고 보안 정책에서 요구하는 확인을 요청해야 합니다.
AI 에이전트, 크롤러, 스크립트가 전체 페이지 대신 정리된 컨텍스트만 필요할 때 이 링크를 사용하세요.
"api-and-interface-design" 사용 중입니다. Create a contract for a task service with create, list, update, and delete operations.
예상 결과:
"api-and-interface-design" 사용 중입니다. Review a charge endpoint that checks for an idempotency key, charges a card, then stores the key.
예상 결과:
The sequence has a race because concurrent requests can both pass the check. Claim the key with a unique constraint before the charge, compare request hashes, and define a deliberate response for in-flight duplicates.
"api-and-interface-design" 사용 중입니다. Plan a compatible addition of an optional priority field to task creation.
예상 결과:
Add the optional field without changing existing types or removing fields. Document the default, validate it at the API boundary, update shared types, and add contract tests for old clients.
All 52 static findings are false positives from Markdown backticks, TypeScript template literals, REST examples, and ordinary API terminology. The skill is documentation-only and contains no shell execution, system reconnaissance, prompt injection, or malicious intent.
버전이 지정된 평가 보고서, 중립 배지, 임베드 카드 및 인용을 공유하세요. Skillstore는 근거를 보고하지만 이 Skill의 안전 여부를 판단하지 않습니다.
https://skillstore.io/skills/addyosmani-api-and-interface-design/audits/2?utm_source=security_passport&utm_medium=share&utm_campaign=versioned_report[](https://skillstore.io/skills/addyosmani-api-and-interface-design?utm_source=security_passport_badge)<a href="https://skillstore.io/skills/addyosmani-api-and-interface-design?utm_source=security_passport_badge"><img src="https://skillstore.io/badges/skills/addyosmani-api-and-interface-design/security.svg" alt="Skillstore security assessment" loading="lazy"></a><iframe src="https://skillstore.io/embed/skills/addyosmani-api-and-interface-design.html" title="Skillstore Security Assessment" sandbox="allow-popups allow-popups-to-escape-sandbox" loading="lazy" referrerpolicy="no-referrer" width="420" height="180"></iframe>addyosmani. (2026). api-and-interface-design security audit report (audit version 2) [Author version unspecified]. Skillstore. https://skillstore.io/skills/addyosmani-api-and-interface-design/audits/2@techreport{addyosmani-addyosmani-api-and-interface-design-2026,
author = {addyosmani},
title = {api-and-interface-design security audit report (audit version 2)},
institution = {Skillstore},
year = {2026},
number = {2},
url = {https://skillstore.io/skills/addyosmani-api-and-interface-design/audits/2},
note = {Author version unspecified}
}cff-version: 1.2.0
message: "If you use this Skill, cite its author and this versioned security audit report."
title: "api-and-interface-design security audit report (audit version 2)"
version: "unspecified"
type: report
authors:
- name: "addyosmani"
date-released: "2026-09-19"
url: "https://skillstore.io/skills/addyosmani-api-and-interface-design/audits/2"
identifiers:
- type: other
value: "skillstore:addyosmani-api-and-interface-design:audit:2"
description: "Skillstore immutable audit report identifier"
Define resource URLs, typed payloads, error responses, pagination, filters, and compatibility rules before implementation.
Inspect an existing API or module boundary for inconsistent contracts, breaking changes, weak validation, and unsafe retry behavior.
Model idempotency keys, atomic request claims, payload matching, in-flight duplicates, and unknown outcomes for state-changing operations.
Design a REST API for [resource]. Define endpoints, typed inputs and outputs, status codes, error bodies, pagination, and naming conventions.
Review this API contract for inconsistent response shapes, validation placement, naming, and backward compatibility. Recommend specific changes: [paste contract].
Design an additive migration from [current interface] to [target interface]. Identify consumer risks, compatibility steps, deprecation timing, and verification checks.
Design an idempotent workflow for [operation]. Cover key derivation, unique storage, request hashing, concurrent duplicates, unknown outcomes, retention, and failure recovery.
작성자
addyosmani라이선스
MIT
Skillstore 리비전
r2
버전 안내
작성자가 버전을 선언하지 않았습니다.
참조
5d5054f8a23586f9b500fece1cb613a9dffc787b
유지보수 최신성
2026. 9. 19.
사용량
0 다운로드 · 0 조회
파일 구조
📄 SKILL.md
Clarify User Intent Before You Build
Underspecified requests cause teams to build the wrong outcome and discover misalignment late. This skill runs a focused, one-question interview that turns ambiguity into confirmed intent.
다섯 가지 품질 기준으로 코드 검토
코드 변경에는 정확성, 보안, 아키텍처, 가독성 및 성능 문제가 숨어 있을 수 있습니다. 이 스킬은 체계적인 검토 프로세스를 적용하여 우선순위가 명확하고 실행 가능한 피드백을 제공합니다.
Plan Work Into Verifiable Tasks
Large or vague software work can hide dependencies, missing acceptance criteria, and verification gaps. This skill converts a specification into ordered task slices with checkpoints, scope guidance, and clear completion conditions.
Document Decisions and Architecture Clearly
Teams lose context when important technical decisions remain in chat, code comments, or individual memory. This skill turns architectural reasoning, API guidance, project instructions, and release changes into structured documentation.
Build Accessible, Production-Ready Frontends
Frontend work can become inconsistent, inaccessible, or difficult to maintain. This skill guides component architecture, responsive layouts, state handling, and polished user experiences.
Harden Applications Against Security Risks
Security reviews can miss trust boundaries and unsafe data flows. This skill supplies threat-modeling prompts, OWASP patterns, and practical review checklists.
신뢰할 수 있는 REST 및 GraphQL API 설계
작성자 AutumnsGrove
API 팀에는 일관된 엔드포인트, 인증, 문서화가 필요합니다. 이 스킬은 REST, GraphQL, OpenAPI, 버전 관리, 보안 설계 결정을 안내합니다.
프로덕션 수준의 API 계약 설계
작성자 ArieGoldkin
팀은 리소스, 오류, 버전 관리가 일관되지 않은 API를 설계하는 경우가 많습니다. 이 스킬은 REST, GraphQL, gRPC, OpenAPI, AsyncAPI 작업을 위한 패턴, 체크리스트, 템플릿을 제공합니다.
핵심 비즈니스 함수 추가
작성자 Artisan-Edge
각 함수가 서로 다른 구조를 따르면 핵심 비즈니스 로직이 일관성을 잃을 수 있습니다. 이 스킬은 Catalyst-Relay 규칙에 따라 Claude, Codex, Claude Code를 안내합니다.
Playwright 테스트 커버리지 개선
작성자 C0ntr0lledCha0s
구성, 로케이터, 픽스처가 일관되지 않으면 Playwright 스위트가 불안정해질 수 있습니다. 이 스킬은 신뢰할 수 있는 브라우저 테스트, 디버깅, 재사용 가능한 페이지 객체를 위한 실용적인 패턴을 제공합니다.
재사용 가능한 패턴으로 FastAPI API 구축하기
작성자 0xDarkMatter
FastAPI 프로젝트에는 검증, 의존성, 미들웨어, 백그라운드 작업에 대한 일관된 선택이 필요합니다. 이 스킬은 Claude, Codex, Claude Code에 실용적인 Python API 개발을 위한 재사용 가능한 패턴을 제공합니다.
Audit NestJS Code with Evidence-Backed Findings
작성자 amirtaherkhani
NestJS repositories can hide boundary flaws and runtime risks that lint results alone cannot reveal. This skill combines local evidence collection and semantic review into one prioritized report.