Skills api-dev
🔌

api-dev

Safe 🌐 Network access📁 Filesystem access⚙️ External commands🔑 Env variables

Build High-Performance REST APIs

Building scalable APIs requires mastering async patterns, error handling, and rate limiting. This skill provides ready-to-use code patterns for circuit breakers, caching, testing, and production configurations that work across Python, Node.js, and Go.

Supports: Claude Codex Code(CC)
⚠️ 65 Poor
1

Download the skill ZIP

2

Upload in Claude

Go to Settings → Capabilities → Skills → Upload skill

3

Toggle on and start using

Test it

Using "api-dev". Create an async API client with connection pooling and retry logic

Expected outcome:

  • Created AsyncAPIClient class with TCPConnector for connection pooling
  • Added retry logic using exponential backoff
  • Included metrics tracking decorator for request duration and status codes
  • Configured timeout handling and session lifecycle management

Using "api-dev". Implement rate limiting for my API endpoint

Expected outcome:

  • Created RateLimiter class with Redis sliding window algorithm
  • Added RateLimitMiddleware for FastAPI integration
  • Configured default of 100 requests per minute per IP
  • Included custom identifier function support for user-based limiting

Using "api-dev". Add circuit breaker pattern to external API calls

Expected outcome:

  • Implemented CircuitBreaker class with OPEN, HALF_OPEN, CLOSED states
  • Added configurable failure threshold and timeout values
  • Created decorator for easy integration with async functions
  • Included automatic circuit reset after timeout period

Security Audit

Safe
v6 • 1/16/2026

Pure documentation skill containing example code patterns for API development. Static scanner flagged standard patterns (HTTP clients, connection strings, pickle serialization) as suspicious, but these are legitimate examples in documentation. No malicious intent found. Original audit correctly rated this skill safe.

2
Files scanned
1,093
Lines analyzed
5
findings
6
Total audits

Critical Issues (1)

Pickle Deserialization Usage
The skill contains example code using Python's pickle module for caching responses. While this is legitimate documentation for API performance optimization, pickle deserialization can be a security risk if untrusted data is processed. This is flagged as a documentation pattern, not an actual vulnerability.
Audited by: claude View Audit History →

Quality Score

38
Architecture
100
Maintainability
87
Content
22
Community
85
Security
74
Spec Compliance

What You Can Build

Build production APIs

Implement async APIs with proper error handling, rate limiting, and circuit breakers for production reliability.

Configure API monitoring

Set up Prometheus metrics, structured logging, health checks, and performance optimization for API services.

Create API tests

Write comprehensive unit and integration tests for API endpoints with mocking and pagination validation.

Try These Prompts

Create async API client
Create an async API client in Python with connection pooling, retry logic, and metrics tracking for high-performance HTTP requests.
Add rate limiting
Implement rate limiting middleware using Redis sliding window algorithm with configurable limits per user or IP address.
Design API versioning
Design an API versioning strategy supporting header-based, URL path-based, and query parameter-based version detection.
Set up API testing
Write async API tests using pytest and httpx including unit tests, integration tests, and rate limiting validation.

Best Practices

  • Always use connection pooling with limits to prevent resource exhaustion
  • Implement circuit breakers to prevent cascade failures in distributed systems
  • Use structured logging with correlation IDs for API request tracing

Avoid

  • Making synchronous HTTP calls in async handlers
  • Skipping rate limiting on public API endpoints
  • Not validating input schema before processing requests

Frequently Asked Questions

Which programming languages are supported?
Patterns work with Python, Node.js, Go, and other languages. Code examples focus on Python async patterns.
What are the performance limits for rate limiting?
Default is 100 requests per minute with configurable limits. Redis-backed implementation supports high concurrency.
How do I integrate with existing frameworks?
Patterns are framework-agnostic. Examples show FastAPI and aiohttp but concepts apply to Express, Gin, and others.
Is my data safe when using these patterns?
Yes. This skill only provides patterns. No data leaves your environment when implementing these patterns.
Why is my async API running slowly?
Check for blocking synchronous calls, missing connection pooling, or unoptimized database queries in async contexts.
How does this compare to Express.js or FastAPI directly?
This skill provides patterns that work within any framework. FastAPI and Express handle routing while patterns add reliability.

Developer Details

File structure

📄 SKILL.md