Skip to content
Back to skills

Api Contract

ASecurity

Design or change an HTTP or RPC API with explicit resources, errors, idempotency, authorization, versioning and contract tests.

  • 3 stars
  • 0 votes
  • 0 copies
  • 0 views
  • Added November 7, 2026
securityapi

Works with

  • cli
  • api

Security analysis

A100/100

Scanned November 7, 2026

npx -y skills add Eliahhango/nullbyte-security --skill api-contract --agent claude-code

Installs into .claude/skills of the current project.

Are you the author of Api Contract?

Add the live security badge to your README. It updates with every re-scan.

Security grade badge for Api Contract
[![Security: A — Skills Directory](https://www.skillsdirectory.com/api/skills/eliahhango-api-contract/badge)](https://www.skillsdirectory.com/skills/eliahhango-api-contract)

More formats (shields.io, HTML) on the badges page. Keep it an A: scan every change in CI with Pro.

Download with Pro
SKILL.md
---
name: api-contract
description: Design or change an HTTP or RPC API with explicit resources, errors, idempotency, authorization, versioning and contract tests.
---

# API contract: design the stable boundary first

- Model resources and operations before writing handlers. Name the stable identifiers, ownership rules and lifecycle transitions.
- Define success and error shapes once. Use consistent status codes and a machine-readable error code; do not leak stack traces.
- Make retries safe: idempotency keys for creates, predictable pagination, and no side effects on GET.
- Specify authentication and object-level authorization for every operation, including list and export paths.
- Version compatibility deliberately. Additive changes first; deprecate with a window and a migration path.
- Write contract tests against the schema and the authorization matrix, not just the happy-path response.
- Document limits, timeouts and rate-limit behaviour where clients can observe them.

---

_NullByte skill pack. Original guidance for this tool; no third-party skill text is bundled._

Attribution

Is this your skill, or is something wrong with this listing? Request removal or report an issue. Author removals are honored within 72 hours.

Comments

Loading comments…

Newsletter

Get the weekly list of safe new skills, and the ones we pulled.