Design Stable APIs and Interfaces
Unclear contracts, inconsistent errors, and unsafe retries make APIs difficult to use and evolve. This skill provides practical patterns for typed interfaces, validation boundaries, compatibility, pagination, and idempotency.
將此請求複製給你的智慧代理，其中包含權威 Skill 頁面和清單。
Review the Skillstore skill "api-and-interface-design" from https://skillstore.io/skills/addyosmani-api-and-interface-design.md and its manifest at https://skillstore.io/api/skills/addyosmani-api-and-interface-design/manifest. Verify the artifact. You may proceed after verification, subject to the environment's own policy.你的智慧代理仍應顯示其計畫，並依安全政策請求必要確認。
當 AI Agent、爬蟲或腳本需要乾淨脈絡、而不是讀取完整頁面時，請使用這些連結。
正在使用「api-and-interface-design」。 Create a contract for a task service with create, list, update, and delete operations.
預期結果:
正在使用「api-and-interface-design」。 Review a charge endpoint that checks for an idempotency key, charges a card, then stores the key.
預期結果:
The sequence has a race because concurrent requests can both pass the check. Claim the key with a unique constraint before the charge, compare request hashes, and define a deliberate response for in-flight duplicates.
正在使用「api-and-interface-design」。 Plan a compatible addition of an optional priority field to task creation.
預期結果:
Add the optional field without changing existing types or removing fields. Document the default, validate it at the API boundary, update shared types, and add contract tests for old clients.
All 52 static findings are false positives from Markdown backticks, TypeScript template literals, REST examples, and ordinary API terminology. The skill is documentation-only and contains no shell execution, system reconnaissance, prompt injection, or malicious intent.
分享版本化評估報告、中性徽章、嵌入卡片與引用。Skillstore 只報告證據，不判斷該 Skill 是否安全。
https://skillstore.io/skills/addyosmani-api-and-interface-design/audits/2?utm_source=security_passport&utm_medium=share&utm_campaign=versioned_report[](https://skillstore.io/skills/addyosmani-api-and-interface-design?utm_source=security_passport_badge)<a href="https://skillstore.io/skills/addyosmani-api-and-interface-design?utm_source=security_passport_badge"><img src="https://skillstore.io/badges/skills/addyosmani-api-and-interface-design/security.svg" alt="Skillstore security assessment" loading="lazy"></a><iframe src="https://skillstore.io/embed/skills/addyosmani-api-and-interface-design.html" title="Skillstore Security Assessment" sandbox="allow-popups allow-popups-to-escape-sandbox" loading="lazy" referrerpolicy="no-referrer" width="420" height="180"></iframe>addyosmani. (2026). api-and-interface-design security audit report (audit version 2) [Author version unspecified]. Skillstore. https://skillstore.io/skills/addyosmani-api-and-interface-design/audits/2@techreport{addyosmani-addyosmani-api-and-interface-design-2026,
author = {addyosmani},
title = {api-and-interface-design security audit report (audit version 2)},
institution = {Skillstore},
year = {2026},
number = {2},
url = {https://skillstore.io/skills/addyosmani-api-and-interface-design/audits/2},
note = {Author version unspecified}
}cff-version: 1.2.0
message: "If you use this Skill, cite its author and this versioned security audit report."
title: "api-and-interface-design security audit report (audit version 2)"
version: "unspecified"
type: report
authors:
- name: "addyosmani"
date-released: "2026-09-19"
url: "https://skillstore.io/skills/addyosmani-api-and-interface-design/audits/2"
identifiers:
- type: other
value: "skillstore:addyosmani-api-and-interface-design:audit:2"
description: "Skillstore immutable audit report identifier"
Define resource URLs, typed payloads, error responses, pagination, filters, and compatibility rules before implementation.
Inspect an existing API or module boundary for inconsistent contracts, breaking changes, weak validation, and unsafe retry behavior.
Model idempotency keys, atomic request claims, payload matching, in-flight duplicates, and unknown outcomes for state-changing operations.
Design a REST API for [resource]. Define endpoints, typed inputs and outputs, status codes, error bodies, pagination, and naming conventions.
Review this API contract for inconsistent response shapes, validation placement, naming, and backward compatibility. Recommend specific changes: [paste contract].
Design an additive migration from [current interface] to [target interface]. Identify consumer risks, compatibility steps, deprecation timing, and verification checks.
Design an idempotent workflow for [operation]. Cover key derivation, unique storage, request hashing, concurrent duplicates, unknown outcomes, retention, and failure recovery.
作者
addyosmani授權
MIT
Skillstore 修訂
r2
版本提示
作者未聲明版本。
引用
5d5054f8a23586f9b500fece1cb613a9dffc787b
維護新鮮度
2026/9/19
使用量
0 次下載 · 0 次瀏覽
檔案結構
📄 SKILL.md
Clarify User Intent Before You Build
Underspecified requests cause teams to build the wrong outcome and discover misalignment late. This skill runs a focused, one-question interview that turns ambiguity into confirmed intent.
依五大品質面向審查程式碼
程式碼變更可能隱藏正確性、安全性、架構、可讀性與效能問題。此 skill 採用結構化的審查流程，並產出依優先順序排列且可採取行動的意見。
Plan Work Into Verifiable Tasks
Large or vague software work can hide dependencies, missing acceptance criteria, and verification gaps. This skill converts a specification into ordered task slices with checkpoints, scope guidance, and clear completion conditions.
Document Decisions and Architecture Clearly
Teams lose context when important technical decisions remain in chat, code comments, or individual memory. This skill turns architectural reasoning, API guidance, project instructions, and release changes into structured documentation.
Build Accessible, Production-Ready Frontends
Frontend work can become inconsistent, inaccessible, or difficult to maintain. This skill guides component architecture, responsive layouts, state handling, and polished user experiences.
Harden Applications Against Security Risks
Security reviews can miss trust boundaries and unsafe data flows. This skill supplies threat-modeling prompts, OWASP patterns, and practical review checklists.
設計可靠的 REST 與 GraphQL API
由 AutumnsGrove
API 團隊需要一致的端點、身分驗證與文件。這項技能引導 REST、GraphQL、OpenAPI、版本控管與安全性設計決策。
設計正式環境就緒的 API 契約
由 ArieGoldkin
團隊在設計 API 時，常會出現資源、錯誤與版本控管不一致的情況。此技能為 REST、GraphQL、gRPC、OpenAPI 和 AsyncAPI 工作提供模式、檢查清單與範本。
新增核心商業函式
由 Artisan-Edge
當每個函式遵循不同結構時，核心商業邏輯可能變得不一致。此技能會引導 Claude、Codex 和 Claude Code 遵循 Catalyst-Relay 慣例。
提升 Playwright 測試覆蓋率
由 C0ntr0lledCha0s
當設定、定位器和 fixtures 不一致時，Playwright 測試套件可能會變得不穩定。此技能提供可靠瀏覽器測試、除錯和可重用 page objects 的實用模式。
使用可重用模式建置 FastAPI API
由 0xDarkMatter
FastAPI 專案需要在驗證、依賴項、middleware 和背景工作方面做出一致的選擇。這項技能為 Claude、Codex 和 Claude Code 提供可重用模式，用於實務 Python API 開發。
Audit NestJS Code with Evidence-Backed Findings
由 amirtaherkhani
NestJS repositories can hide boundary flaws and runtime risks that lint results alone cannot reveal. This skill combines local evidence collection and semantic review into one prioritized report.