Skills api-testing-observability-api-mock
📦

api-testing-observability-api-mock

Content revision r1 Low Risk 🌐 Network access🔑 Env variables⚙️ External commands

Build Realistic API Mock Services

Mock APIs are hard to keep realistic, aligned with contracts, and useful for tests. This skill helps design stateful mocks, scenarios, fixtures, deployment steps, and documentation.

Supports: Claude Codex Code(CC)
📊 74 Adequate

Install with my Agent

Copy this request to your Agent. It includes the canonical Skill page and manifest.

Agent request
Review the Skillstore skill "api-testing-observability-api-mock" from https://skillstore.io/skills/sickn33-api-testing-observability-api-mock.md and its manifest at https://skillstore.io/api/skills/sickn33-api-testing-observability-api-mock/manifest. Verify the artifact. You may proceed after verification, subject to the environment's own policy.

Your Agent should still show its plan and request any confirmation required by the security policy.

Agent-readable resources

Use these links when an AI agent, crawler, or script needs clean context instead of reading the full page.

Markdown detail GET /skills/sickn33-api-testing-observability-api-mock.md Signed manifest GET /api/skills/sickn33-api-testing-observability-api-mock/manifest Signed lockfile GET /api/skills/sickn33-api-testing-observability-api-mock/lockfile

Test it

Using "api-testing-observability-api-mock". Create mocks for a user profile API.

Expected outcome:

  • A route plan for profile retrieval, updates, validation errors, and not-found cases.
  • Fixture guidance for realistic users, addresses, preferences, and account states.
  • Test scenario notes for success, expired sessions, and slow responses.

Using "api-testing-observability-api-mock". Mock a payment provider for local testing.

Expected outcome:

  • Scenario definitions for approved, declined, pending, refunded, and webhook delivery states.
  • Request verification guidance for idempotency keys, headers, and retry behavior.
  • Safety notes to avoid real cards, production credentials, and customer records.

Using "api-testing-observability-api-mock". Turn an OpenAPI contract into test mocks.

Expected outcome:

  • A contract-driven mock plan with endpoints, response variants, and schema checks.
  • A validation checklist for status codes, required fields, and documented error responses.

Security Audit

Low Risk
v6 • 7/9/2026 Open versioned report

Most static findings are false positives in examples or Markdown paths, including local mock URLs, config dictionary lookups, and backticked resource names. Two external Swagger UI CDN references are confirmed as low risk because generated documentation would load third-party assets. I also found a low data-handling concern where mock request tracking stores full headers and request bodies.

2
Files scanned
1,383
Lines analyzed
2
Review items
0
False positives ignored

Confirmed security concerns (1)

Low
resources/implementation-playbook.md:65-69resources/implementation-playbook.md:247-252
Mock Request Capture Stores Sensitive Fields
The sample mock server records full headers and request bodies for verification. This can retain tokens, cookies, or personal data if real clients point at the mock.
The cited samples explicitly convert all request headers to dictionaries and parse request bodies. The skill warns against production secrets, so the risk is local retention rather than malicious exfiltration.
Capability review items (2)

These are real local capabilities that may be expected for this skill, so they require review but are not counted as confirmed malicious behavior.

Low
resources/implementation-playbook.md:1276
Hardcoded URL
<script src="https://unpkg.com/swagger-ui-dist/swagger-ui-bundle.js"></script>
The generated documentation loads JavaScript from unpkg.com. This is a low supply-chain and availability risk if users publish the docs without pinning or self-hosting assets.
Low
resources/implementation-playbook.md:1277
Hardcoded URL
<link rel="stylesheet" href="https://unpkg.com/swagger-ui-dist/swagger-ui.css">
The generated documentation loads a stylesheet from unpkg.com. This external dependency is legitimate but creates a low third-party asset risk.

Risk Factors

🌐 Network access (10)
resources/implementation-playbook.md:1045 resources/implementation-playbook.md:65 resources/implementation-playbook.md:77 resources/implementation-playbook.md:190 resources/implementation-playbook.md:244 resources/implementation-playbook.md:1045 resources/implementation-playbook.md:1158 resources/implementation-playbook.md:1170 resources/implementation-playbook.md:1276 resources/implementation-playbook.md:1277
🔑 Env variables (4)
resources/implementation-playbook.md:760 resources/implementation-playbook.md:761 resources/implementation-playbook.md:762 resources/implementation-playbook.md:763
⚙️ External commands (2)
SKILL.md:45 SKILL.md:49
Audited by: codex View Audit History →
Share & cite this report

Share the versioned assessment report, neutral badge, embed card, and citations. Skillstore reports evidence without deciding whether this Skill is safe.

Open versioned report
Security Assessment

Copy report link

https://skillstore.io/skills/sickn33-api-testing-observability-api-mock/audits/6?utm_source=security_passport&utm_medium=share&utm_campaign=versioned_report

Markdown badge

[![Skillstore security assessment](https://skillstore.io/badges/skills/sickn33-api-testing-observability-api-mock/security.svg)](https://skillstore.io/skills/sickn33-api-testing-observability-api-mock?utm_source=security_passport_badge)

HTML badge

<a href="https://skillstore.io/skills/sickn33-api-testing-observability-api-mock?utm_source=security_passport_badge"><img src="https://skillstore.io/badges/skills/sickn33-api-testing-observability-api-mock/security.svg" alt="Skillstore security assessment" loading="lazy"></a>

Embed card

<iframe src="https://skillstore.io/embed/skills/sickn33-api-testing-observability-api-mock.html" title="Skillstore Security Assessment" sandbox="allow-popups allow-popups-to-escape-sandbox" loading="lazy" referrerpolicy="no-referrer" width="420" height="180"></iframe>
Academic citations (APA · BibTeX · CFF)

APA citation

sickn33. (2026). api-testing-observability-api-mock security audit report (audit version 6) [Author version unspecified]. Skillstore. https://skillstore.io/skills/sickn33-api-testing-observability-api-mock/audits/6

BibTeX citation

@techreport{sickn33-sickn33-api-testing-observability-api-mock-2026, author = {sickn33}, title = {api-testing-observability-api-mock security audit report (audit version 6)}, institution = {Skillstore}, year = {2026}, number = {6}, url = {https://skillstore.io/skills/sickn33-api-testing-observability-api-mock/audits/6}, note = {Author version unspecified} }

CITATION.cff

cff-version: 1.2.0 message: "If you use this Skill, cite its author and this versioned security audit report." title: "api-testing-observability-api-mock security audit report (audit version 6)" version: "unspecified" type: report authors: - name: "sickn33" date-released: "2026-07-09" url: "https://skillstore.io/skills/sickn33-api-testing-observability-api-mock/audits/6" identifiers: - type: other value: "skillstore:sickn33-api-testing-observability-api-mock:audit:6" description: "Skillstore immutable audit report identifier"

Skillstore Score

Why this score Evidence Confidence: High
55
Architecture
85
Maintainability
87
Content
68
Community
83
Spec Compliance

What You Can Build

Frontend Development Before Backend Readiness

Create realistic endpoints so frontend teams can build and test without waiting for backend completion.

Contract-Based Integration Testing

Generate mock responses from API contracts and validate expected status codes, schemas, and error shapes.

Reliable Demo Environments

Build scenario-driven mocks that show happy paths, failures, latency, and degraded service behavior.

Try These Prompts

Plan a Mock API 
Create a mock API plan for this frontend feature. Ask for missing endpoints, response shapes, auth behavior, errors, and latency.
Generate a Mock Service 
Generate a FastAPI mock service from this API contract. Include routes, sample fixtures, error scenarios, and run instructions.
Design Test Scenarios 
Design scenario-based mocks for happy path, rate limits, expired sessions, and degraded performance. Include reset behavior and request verification.
Build a Mocking Strategy 
Build a full API mock strategy for this service migration. Cover contract validation, stateful data, test integration, deployment, and documentation.

Best Practices

  • Start from a current API contract before adding custom behavior.
  • Use deterministic fixtures by default, then add controlled randomness when needed.
  • Clearly label mock endpoints and keep them separate from production services.

Avoid

  • Do not point live production traffic at a mock service.
  • Do not store real secrets, tokens, payment data, or customer records in fixtures.
  • Do not create mocks that hide contract drift or missing backend behavior.

Frequently Asked Questions

What kind of API work is this skill for?
It is for designing mock APIs used in development, testing, demonstrations, and contract validation.
Can it generate a complete mock server plan?
Yes. It can outline routes, state handling, fixtures, scenarios, test hooks, deployment, and documentation.
Does it replace integration testing against real services?
No. It supports earlier testing, but real service validation is still required before release.
Can it work from an OpenAPI contract?
Yes. The playbook includes contract loading, mock generation, and response validation patterns.
How should sensitive data be handled?
Use synthetic fixtures only. Redact tokens, cookies, and personal data from request history and logs.
Which tools can use this skill?
The report lists support for Claude, Codex, and Claude Code.

Developer Details

Author

sickn33

License

MIT

Skillstore revision

r1

Version notice

The author did not declare a version.

Repository

https://github.com/sickn33/antigravity-awesome-skills/tree/main/skills/api-testing-observability-api-mock

Ref

3e4b6c31a74a3bd1a291c98cf585d720cb9fbc88

Maintenance freshness

7/18/2026

Usage

6 downloads · 91 views

File structure

📁 resources/

📄 implementation-playbook.md

📄 SKILL.md