Design Better REST and GraphQL APIs
Teams often ship APIs with inconsistent resources, errors, pagination, and versioning. This skill provides REST and GraphQL patterns, review checklists, and templates for durable developer-facing APIs.
Copy this request to your Agent. It includes the canonical Skill page and manifest.
Review the Skillstore skill "api-design-principles" from https://skillstore.io/skills/wshobson-api-design-principles.md and its manifest at https://skillstore.io/api/skills/wshobson-api-design-principles/manifest. Verify the artifact. You may proceed after verification, subject to the environment's own policy.Your Agent should still show its plan and request any confirmation required by the security policy.
Use these links when an AI agent, crawler, or script needs clean context instead of reading the full page.
Using "api-design-principles". A team wants a user management API before implementation.
Expected outcome:
Using "api-design-principles". A GraphQL schema has slow nested order lookups.
Expected outcome:
Using "api-design-principles". An API review board needs shared standards.
Expected outcome:
Most static findings are false positives from Markdown examples, GraphQL identifier fields, sample URLs, and HTTP status documentation. One real issue remains: the FastAPI asset presents production guidance while using permissive host, CORS, and bind-address defaults.
These are real local capabilities that may be expected for this skill, so they require review but are not counted as confirmed malicious behavior.
Share the versioned assessment report, neutral badge, embed card, and citations. Skillstore reports evidence without deciding whether this Skill is safe.
https://skillstore.io/skills/wshobson-api-design-principles/audits/8?utm_source=security_passport&utm_medium=share&utm_campaign=versioned_report[](https://skillstore.io/skills/wshobson-api-design-principles?utm_source=security_passport_badge)<a href="https://skillstore.io/skills/wshobson-api-design-principles?utm_source=security_passport_badge"><img src="https://skillstore.io/badges/skills/wshobson-api-design-principles/security.svg" alt="Skillstore security assessment" loading="lazy"></a><iframe src="https://skillstore.io/embed/skills/wshobson-api-design-principles.html" title="Skillstore Security Assessment" sandbox="allow-popups allow-popups-to-escape-sandbox" loading="lazy" referrerpolicy="no-referrer" width="420" height="180"></iframe>wshobson. (2026). api-design-principles security audit report (audit version 8) [Author version unspecified]. Skillstore. https://skillstore.io/skills/wshobson-api-design-principles/audits/8@techreport{wshobson-wshobson-api-design-principles-2026,
author = {wshobson},
title = {api-design-principles security audit report (audit version 8)},
institution = {Skillstore},
year = {2026},
number = {8},
url = {https://skillstore.io/skills/wshobson-api-design-principles/audits/8},
note = {Author version unspecified}
}cff-version: 1.2.0
message: "If you use this Skill, cite its author and this versioned security audit report."
title: "api-design-principles security audit report (audit version 8)"
version: "unspecified"
type: report
authors:
- name: "wshobson"
date-released: "2026-07-07"
url: "https://skillstore.io/skills/wshobson-api-design-principles/audits/8"
identifiers:
- type: other
value: "skillstore:wshobson-api-design-principles:audit:8"
description: "Skillstore immutable audit report identifier"
Each author remains a separate installable skill. The recommended variant is ranked by Skillstore evidence.
Why this variant is first
sickn33-api-design-principles
2026-08-21
wshobson-api-design-principles
2026-08-21
Define resource names, methods, status codes, errors, pagination, and versioning before implementation begins.
Create consistent design rules for REST and GraphQL APIs across services and teams.
Check whether API docs explain auth, errors, examples, pagination, and migration paths clearly.
Review this REST API plan for resource names, HTTP methods, status codes, pagination, and error responses. List the highest priority changes first.
Design a GraphQL schema for this domain. Include types, queries, mutations, pagination choices, error patterns, and DataLoader guidance.
Evaluate whether this product area should use REST, GraphQL, or both. Consider clients, caching, versioning, performance, and developer experience.
Create team standards for API naming, versioning, authentication, rate limits, documentation, migrations, and review gates. Include pull request review criteria.
Author
wshobsonLicense
MIT
Skillstore revision
r1
Version notice
The author did not declare a version.
Ref
36e07d5e13068e5be64447e8f20b427cf2cbd21a
Maintenance freshness
7/18/2026
Usage
14 downloads · 412 views
File structure
Optimize Prompts With Proven Patterns
LLM prompts can fail through unclear instructions, weak examples, or missing evaluation. This skill provides templates, reasoning patterns, and optimization workflows for Claude, Codex, and Claude Code.
Manage Context-Driven Development
AI-assisted projects lose consistency when context lives in scattered notes. This skill provides a structured Conductor workflow for product, stack, workflow, and track artifacts.
Build Startup Financial Models
Startup teams need financial plans that connect revenue, hiring, expenses, runway, and fundraising assumptions. This skill guides Claude, Codex, and Claude Code through structured 3-5 year projections and scenario planning.
Write Blameless Incident Postmortems
Incident reviews often lose key facts or produce vague follow-up work. This skill guides Claude, Codex, and Claude Code through timelines, root cause analysis, meetings, and action items.
Transform Data Into Decision Stories
Raw metrics often fail to guide stakeholder decisions. This skill turns analysis into clear narratives, visual structures, and action plans.
Apply Python Design Patterns
Python projects often grow complex when responsibilities mix and abstractions appear too early. This skill guides focused refactors using KISS, SRP, layering, composition, and dependency injection.
Design Production-Ready APIs
by AutumnsGrove
Inconsistent API contracts create integration errors and costly migrations. This skill guides REST, GraphQL, OpenAPI, authentication, versioning, validation, and documentation decisions.
Design Consistent APIs Across Protocols
by ArieGoldkin
Inconsistent API contracts create integration errors and expensive migrations. This skill applies reusable REST, GraphQL, gRPC, OpenAPI, and AsyncAPI patterns to create clear contracts.
Design Clean REST and GraphQL APIs
by CloudAI-X
Designing consistent APIs from scratch is slow and error-prone, and inconsistent endpoints confuse consumers. This skill gives Claude a structured workflow with proven patterns for endpoints, errors, versioning, authentication, and OpenAPI documentation.
Build FastAPI APIs with Reusable Patterns
by 0xDarkMatter
FastAPI projects need consistent choices for validation, dependencies, middleware, and background work. This skill gives Claude, Codex, and Claude Code reusable patterns for practical Python API development.
Design Better REST and GraphQL APIs
by supercent-io
API teams need consistent contracts before implementation starts. This skill guides resource design, request formats, errors, versioning, and documentation.
Build Reliable Backend APIs
by alirezarezvani
Backend projects often need consistent planning across APIs, databases, security, and deployment. This skill gives Claude, Codex, and Claude Code structured backend guidance with simple helper scripts and references.