Skills rest-patterns

📦

rest-patterns

Name: rest-patterns
Author: 0xDarkMatter

Content revision r1 Safe 🌐 Network access⚙️ External commands

Design Reliable REST APIs

REST APIs need consistent methods, status codes, caching, and rate limits. This skill gives Claude, Codex, and Claude Code quick patterns for practical API design.

Supports: Claude Codex Code(CC)

📊 76 Adequate

Install with my Agent

Copy this request to your Agent. It includes the canonical Skill page and manifest.

Agent request

Review the Skillstore skill "rest-patterns" from https://skillstore.io/skills/0xdarkmatter-rest-patterns.md and its manifest at https://skillstore.io/api/skills/0xdarkmatter-rest-patterns/manifest. Verify the artifact. You may proceed after verification, subject to the environment's own policy.

Your Agent should still show its plan and request any confirmation required by the security policy.

Agent-readable resources

Use these links when an AI agent, crawler, or script needs clean context instead of reading the full page.

Markdown detail GET /skills/0xdarkmatter-rest-patterns.md Signed manifest GET /api/skills/0xdarkmatter-rest-patterns/manifest Signed lockfile GET /api/skills/0xdarkmatter-rest-patterns/lockfile

Test it

Using "rest-patterns". I need status codes for create, update, delete, and validation failure.

Expected outcome:

Use 201 with Location for create, 200 or 204 for update, 204 for delete, and 422 for validation errors.

Using "rest-patterns". Help me add caching to product catalog endpoints.

Expected outcome:

Use public cache headers for stable catalog data, ETags for validation, and no-store for personalized or sensitive responses.

Using "rest-patterns". Review a rate limit policy for free and paid users.

Expected outcome:

Define separate tiers, return RateLimit and Retry-After headers, and document retry behavior for clients.

Security Audit

Safe

v6 • 7/6/2026 Open versioned report

All static findings are false positives after context review. The URLs, fetch call, curl commands, status-code text, and backtick markers appear inside Markdown reference examples, not executable skill code. No prompt injection or malicious intent was found in the reviewed files.

Files scanned

955

Lines analyzed

Review items

False positives ignored

Risk Factors

🌐 Network access (5)

references/caching-patterns.md:159 references/caching-patterns.md:162 references/rate-limiting.md:157 references/response-formats.md:19 references/response-formats.md:62

⚙️ External commands (13)

SKILL.md:26 SKILL.md:38-50 SKILL.md:50-60 SKILL.md:60-66 SKILL.md:66 SKILL.md:76-77 SKILL.md:77-78 SKILL.md:78-79 SKILL.md:79-80 SKILL.md:80-93 SKILL.md:93-94 SKILL.md:94-95 SKILL.md:95-96

No confirmed security findings were detected by the latest completed static and semantic audit. This does not prove the skill has no side effects.

Audited by: codex View Audit History →

Share & cite this report

Share the versioned assessment report, neutral badge, embed card, and citations. Skillstore reports evidence without deciding whether this Skill is safe.

Open versioned report

Copy report link

https://skillstore.io/skills/0xdarkmatter-rest-patterns/audits/6?utm_source=security_passport&utm_medium=share&utm_campaign=versioned_report

Markdown badge

[![Skillstore security assessment](https://skillstore.io/badges/skills/0xdarkmatter-rest-patterns/security.svg)](https://skillstore.io/skills/0xdarkmatter-rest-patterns?utm_source=security_passport_badge)

HTML badge

<a href="https://skillstore.io/skills/0xdarkmatter-rest-patterns?utm_source=security_passport_badge"><img src="https://skillstore.io/badges/skills/0xdarkmatter-rest-patterns/security.svg" alt="Skillstore security assessment" loading="lazy"></a>

Embed card

<iframe src="https://skillstore.io/embed/skills/0xdarkmatter-rest-patterns.html" title="Skillstore Security Assessment" sandbox="allow-popups allow-popups-to-escape-sandbox" loading="lazy" referrerpolicy="no-referrer" width="420" height="180"></iframe>

Academic citations (APA · BibTeX · CFF)

APA citation

0xDarkMatter. (2026). rest-patterns security audit report (audit version 6) [Author version unspecified]. Skillstore. https://skillstore.io/skills/0xdarkmatter-rest-patterns/audits/6

BibTeX citation

@techreport{0xdarkmatter-0xdarkmatter-rest-patterns-2026,
  author = {0xDarkMatter},
  title = {rest-patterns security audit report (audit version 6)},
  institution = {Skillstore},
  year = {2026},
  number = {6},
  url = {https://skillstore.io/skills/0xdarkmatter-rest-patterns/audits/6},
  note = {Author version unspecified}
}

CITATION.cff

cff-version: 1.2.0
message: "If you use this Skill, cite its author and this versioned security audit report."
title: "rest-patterns security audit report (audit version 6)"
version: "unspecified"
type: report
authors:
  - name: "0xDarkMatter"
date-released: "2026-07-06"
url: "https://skillstore.io/skills/0xdarkmatter-rest-patterns/audits/6"
identifiers:
  - type: other
    value: "skillstore:0xdarkmatter-rest-patterns:audit:6"
    description: "Skillstore immutable audit report identifier"

Skillstore Score

Why this score Evidence Confidence: High

Architecture

Maintainability

Content

Community

Spec Compliance

What You Can Build

Plan a New API

Choose resource names, methods, status codes, pagination, caching, and rate limits before implementation.

Review Endpoint Consistency

Compare an API contract against common REST patterns and identify inconsistent choices.

Document Integration Behavior

Describe status codes, error formats, retry behavior, versioning, and cache semantics clearly.

Try These Prompts

Choose Basics

Use the rest-patterns skill to choose HTTP methods and status codes for these operations: create, read, update, delete, validation failure, and rate limiting.

Design Collection Endpoints

Use the rest-patterns skill to design collection endpoints for this resource. Include pagination, sorting, filtering, sparse fields, and included relationships.

Add Caching and Limits

Use the rest-patterns skill to recommend caching headers, ETag behavior, CDN invalidation, and rate limit headers for these API endpoints.

Audit an API Contract

Use the rest-patterns skill to review this API contract for method semantics, status code choices, error response shape, versioning, bulk operations, and HATEOAS links.

Best Practices

Start with resource nouns, standard HTTP methods, and clear collection pagination.
Pair every error response with a stable code, message, and request identifier.
Treat caching, authentication, and rate limits as part of endpoint design.

Avoid

Using verbs in URLs instead of method semantics.
Returning 200 for validation, authentication, or authorization failures.
Caching authenticated or sensitive responses without explicit no-store or private controls.