Design Stable APIs and Interfaces
Unclear contracts, inconsistent errors, and unsafe retries make APIs difficult to use and evolve. This skill provides practical patterns for typed interfaces, validation boundaries, compatibility, pagination, and idempotency.
Copie esta solicitação para o seu Agente. Ela inclui a página canônica do Skill e o manifesto.
Review the Skillstore skill "api-and-interface-design" from https://skillstore.io/skills/addyosmani-api-and-interface-design.md and its manifest at https://skillstore.io/api/skills/addyosmani-api-and-interface-design/manifest. Verify the artifact. You may proceed after verification, subject to the environment's own policy.Seu Agente ainda deve apresentar o plano e solicitar qualquer confirmação exigida pela política de segurança.
Use estes links quando um agente de IA, crawler ou script precisar de contexto limpo em vez de ler a página completa.
Usando "api-and-interface-design". Create a contract for a task service with create, list, update, and delete operations.
Resultado esperado:
Usando "api-and-interface-design". Review a charge endpoint that checks for an idempotency key, charges a card, then stores the key.
Resultado esperado:
The sequence has a race because concurrent requests can both pass the check. Claim the key with a unique constraint before the charge, compare request hashes, and define a deliberate response for in-flight duplicates.
Usando "api-and-interface-design". Plan a compatible addition of an optional priority field to task creation.
Resultado esperado:
Add the optional field without changing existing types or removing fields. Document the default, validate it at the API boundary, update shared types, and add contract tests for old clients.
All 52 static findings are false positives from Markdown backticks, TypeScript template literals, REST examples, and ordinary API terminology. The skill is documentation-only and contains no shell execution, system reconnaissance, prompt injection, or malicious intent.
Compartilhe o relatório de avaliação versionado, o badge neutro, o cartão incorporável e as citações. A Skillstore apresenta evidências sem decidir se este Skill é seguro.
https://skillstore.io/skills/addyosmani-api-and-interface-design/audits/2?utm_source=security_passport&utm_medium=share&utm_campaign=versioned_report[](https://skillstore.io/skills/addyosmani-api-and-interface-design?utm_source=security_passport_badge)<a href="https://skillstore.io/skills/addyosmani-api-and-interface-design?utm_source=security_passport_badge"><img src="https://skillstore.io/badges/skills/addyosmani-api-and-interface-design/security.svg" alt="Skillstore security assessment" loading="lazy"></a><iframe src="https://skillstore.io/embed/skills/addyosmani-api-and-interface-design.html" title="Skillstore Security Assessment" sandbox="allow-popups allow-popups-to-escape-sandbox" loading="lazy" referrerpolicy="no-referrer" width="420" height="180"></iframe>addyosmani. (2026). api-and-interface-design security audit report (audit version 2) [Author version unspecified]. Skillstore. https://skillstore.io/skills/addyosmani-api-and-interface-design/audits/2@techreport{addyosmani-addyosmani-api-and-interface-design-2026,
author = {addyosmani},
title = {api-and-interface-design security audit report (audit version 2)},
institution = {Skillstore},
year = {2026},
number = {2},
url = {https://skillstore.io/skills/addyosmani-api-and-interface-design/audits/2},
note = {Author version unspecified}
}cff-version: 1.2.0
message: "If you use this Skill, cite its author and this versioned security audit report."
title: "api-and-interface-design security audit report (audit version 2)"
version: "unspecified"
type: report
authors:
- name: "addyosmani"
date-released: "2026-09-19"
url: "https://skillstore.io/skills/addyosmani-api-and-interface-design/audits/2"
identifiers:
- type: other
value: "skillstore:addyosmani-api-and-interface-design:audit:2"
description: "Skillstore immutable audit report identifier"
Define resource URLs, typed payloads, error responses, pagination, filters, and compatibility rules before implementation.
Inspect an existing API or module boundary for inconsistent contracts, breaking changes, weak validation, and unsafe retry behavior.
Model idempotency keys, atomic request claims, payload matching, in-flight duplicates, and unknown outcomes for state-changing operations.
Design a REST API for [resource]. Define endpoints, typed inputs and outputs, status codes, error bodies, pagination, and naming conventions.
Review this API contract for inconsistent response shapes, validation placement, naming, and backward compatibility. Recommend specific changes: [paste contract].
Design an additive migration from [current interface] to [target interface]. Identify consumer risks, compatibility steps, deprecation timing, and verification checks.
Design an idempotent workflow for [operation]. Cover key derivation, unique storage, request hashing, concurrent duplicates, unknown outcomes, retention, and failure recovery.
Autor
addyosmaniLicença
MIT
Revisão da Skillstore
r2
Aviso de versão
O autor não declarou uma versão.
Referência
5d5054f8a23586f9b500fece1cb613a9dffc787b
Atualidade da manutenção
19/09/2026
Uso
0 downloads · 0 visualizações
Estrutura de arquivos
📄 SKILL.md
Revise o Código em Cinco Eixos de Qualidade
Alterações no código podem ocultar problemas de correção, segurança, arquitetura, legibilidade e desempenho. Esta skill aplica um processo estruturado de revisão e produz feedback priorizado e acionável.
Clarify User Intent Before You Build
Underspecified requests cause teams to build the wrong outcome and discover misalignment late. This skill runs a focused, one-question interview that turns ambiguity into confirmed intent.
Plan Work Into Verifiable Tasks
Large or vague software work can hide dependencies, missing acceptance criteria, and verification gaps. This skill converts a specification into ordered task slices with checkpoints, scope guidance, and clear completion conditions.
Document Decisions and Architecture Clearly
Teams lose context when important technical decisions remain in chat, code comments, or individual memory. This skill turns architectural reasoning, API guidance, project instructions, and release changes into structured documentation.
Build Accessible, Production-Ready Frontends
Frontend work can become inconsistent, inaccessible, or difficult to maintain. This skill guides component architecture, responsive layouts, state handling, and polished user experiences.
Harden Applications Against Security Risks
Security reviews can miss trust boundaries and unsafe data flows. This skill supplies threat-modeling prompts, OWASP patterns, and practical review checklists.
Projetar APIs REST e GraphQL confiáveis
por AutumnsGrove
Equipes de API precisam de endpoints, autenticação e documentação consistentes. Esta skill orienta decisões de design sobre REST, GraphQL, OpenAPI, versionamento e segurança.
Projete Contratos de API Prontos para Produção
por ArieGoldkin
Equipes frequentemente projetam APIs com recursos, erros e versionamento inconsistentes. Esta skill fornece padrões, checklists e templates para trabalhos com REST, GraphQL, gRPC, OpenAPI e AsyncAPI.
Melhorar a cobertura de testes do Playwright
por C0ntr0lledCha0s
Suites do Playwright podem se tornar instáveis quando a configuração, os localizadores e as fixtures são inconsistentes. Esta skill fornece padrões práticos para testes de navegador confiáveis, depuração e page objects reutilizáveis.
Crie APIs FastAPI com Padrões Reutilizáveis
por 0xDarkMatter
Projetos FastAPI precisam de escolhas consistentes para validação, dependências, middleware e trabalho em segundo plano. Esta skill fornece a Claude, Codex e Claude Code padrões reutilizáveis para o desenvolvimento prático de APIs Python.
Audit NestJS Code with Evidence-Backed Findings
por amirtaherkhani
NestJS repositories can hide boundary flaws and runtime risks that lint results alone cannot reveal. This skill combines local evidence collection and semantic review into one prioritized report.
Crie aplicações Starknet com starknet.js
por internet-court
As integrações com a Starknet exigem um tratamento preciso de providers, contas, transações e taxas. Esta skill fornece ao Claude, Codex e Claude Code padrões práticos de starknet.js v9.