Skip to content
Back to skills

Bootstrap Openapi Spec From Captured Api Traffic Before Client Or Test Automation

ASecurity

Uses mitmproxy2swagger to turn captured mitmproxy flows or HAR exports into a first-pass OpenAPI document that an agent can refine, validate, and hand off to downstream tooling. Invoke it when the API already exists but the contract does not, and you need a concrete spec before generating clients, mocks, tests, or reviewable docs.

  • 36 stars
  • 0 votes
  • 0 copies
  • 1 view
  • Added June 8, 2026
ai-agentspythongobashdockergitapisecuritydocumentation

Works with

  • cli
  • api

Security analysis

A92/100
  • mediumInstalls packages at runtime which could introduce malicious dependencies

Pro shows the line behind each finding and how to fix it

Scanned June 8, 2026

npx -y skills add agentskillexchange/skills --skill bootstrap-openapi-spec-from-captured-api-traffic-before-client-or-test-automation --agent claude-code

Installs into .claude/skills of the current project.

Are you the author of Bootstrap Openapi Spec From Captured Api Traffic Before Client Or Test Automation?

Add the live security badge to your README. It updates with every re-scan.

Security grade badge for Bootstrap Openapi Spec From Captured Api Traffic Before Client Or Test Automation
[![Security: A — Skills Directory](https://www.skillsdirectory.com/api/skills/agentskillexchange-bootstrap-openapi-spec-from-captured-api-traffic-b/badge)](https://www.skillsdirectory.com/skills/agentskillexchange-bootstrap-openapi-spec-from-captured-api-traffic-b)

More formats (shields.io, HTML) on the badges page. Keep it an A: scan every change in CI with Pro.

Download with Pro
SKILL.md
---
name: "Bootstrap an OpenAPI spec from captured API traffic before client or test automation starts"
slug: "bootstrap-openapi-spec-from-captured-api-traffic-before-client-or-test-automation"
description: "Uses mitmproxy2swagger to turn captured mitmproxy flows or HAR exports into a first-pass OpenAPI document that an agent can refine, validate, and hand off to downstream tooling. Invoke it when the API already exists but the contract does not, and you need a concrete spec before generating clients, mocks, tests, or reviewable docs."
github_stars: 9347
verification: "security_reviewed"
source: "https://github.com/alufers/mitmproxy2swagger"
author: "alufers"
publisher_type: "Individual Maintainer"
category: "Integrations & Connectors"
framework: "Multi-Framework"
tool_ecosystem:
  github_repo: "alufers/mitmproxy2swagger"
  github_stars: 9347
---

# Bootstrap an OpenAPI spec from captured API traffic before client or test automation starts

Uses mitmproxy2swagger to turn captured mitmproxy flows or HAR exports into a first-pass OpenAPI document that an agent can refine, validate, and hand off to downstream tooling. Invoke it when the API already exists but the contract does not, and you need a concrete spec before generating clients, mocks, tests, or reviewable docs.

## Prerequisites

Python 3 and pip, plus mitmproxy flow captures or a HAR export from browser DevTools

## Installation

Use the upstream install or setup path that matches your environment:
- $ pip install mitmproxy2swagger
- $ git clone git@github.com:alufers/mitmproxy2swagger.git
- $ docker build -t mitmproxy2swagger .
- $ docker run -it -v $PWD:/app mitmproxy2swagger mitmproxy2swagger -i <path_to_mitmptoxy_flow> -o <path_to_output_schema> -p <api_prefix>

Requirements and caveats from upstream:
- [poetry](https://python-poetry.org/) for dependency management

Basic usage or getting-started notes:
- First you will need python3 and pip3.
- bash
- # ... or ...

- Source: https://github.com/alufers/mitmproxy2swagger
- Extracted from upstream docs: https://raw.githubusercontent.com/alufers/mitmproxy2swagger/HEAD/README.md

## Documentation

- https://github.com/alufers/mitmproxy2swagger

## Source

- [Agent Skill Exchange](https://agentskillexchange.com/skills/bootstrap-openapi-spec-from-captured-api-traffic-before-client-or-test-automation/)

Attribution

Is this your skill, or is something wrong with this listing? Request removal or report an issue. Author removals are honored within 72 hours.

Comments

Loading comments…

Newsletter

Get the weekly list of safe new skills, and the ones we pulled.