Api Contract Review
Helps with API, code review as part of agent workflows workflows.
Install on your platform
We auto-selected Claude Code based on this skill’s supported platforms.
Run in terminal (recommended)
claude mcp add api-contract-review npx -- -y @trustedskills/api-contract-review
Or manually add to ~/.claude/settings.json
{
"mcpServers": {
"api-contract-review": {
"command": "npx",
"args": [
"-y",
"@trustedskills/api-contract-review"
]
}
}
}Requires Claude Code (claude CLI). Run claude --version to verify your install.
About This Skill
What it does
This skill analyzes API contracts (likely OpenAPI/Swagger or similar formats) to identify potential issues, inconsistencies, and areas for improvement. It can help ensure APIs are well-defined, secure, and adhere to best practices. The tool focuses on contract correctness and completeness rather than code generation.
When to use it
- Before API Release: Validate a new API contract before making it public or integrating with external systems.
- During API Updates: Ensure changes to an existing API contract don't introduce regressions or break compatibility.
- For Contract-First Development: Verify the API design is sound and complete before any implementation begins.
- Automated CI/CD Pipelines: Integrate into automated workflows for continuous API contract validation.
Key capabilities
- Contract correctness checking
- Completeness assessment
- Identification of inconsistencies
- Best practices adherence verification
Example prompts
- "Review this OpenAPI specification and identify any potential issues." [followed by the contract content]
- "Check this API contract for completeness, ensuring all required fields are present." [followed by the contract content]
- "Analyze this API definition and flag any inconsistencies in data types or parameter names." [followed by the contract content]
Tips & gotchas
The skill requires a valid API contract file (e.g., YAML or JSON) as input. The quality of the review depends on the clarity and accuracy of the provided contract.
Tags
TrustedSkills Verification
Unlike other registries that point to live repositories, TrustedSkills pins every skill to a verified commit hash. This protects you from malicious updates — what you install today is exactly what was reviewed and verified.
Security Audits
| Gen Agent Trust Hub | Pass |
| Socket | Pass |
| Snyk | Pass |
🌐 Community
Passed automated security scans.