Skip to content

Skills suchen.../

Agent Skill Search Engine

Suche

Suche
Kategorien
Berufe

About

About
Privacy
Terms

© 2026 Skills Pool. Alle Rechte vorbehalten.

Api Contract Review | Skills Pool

Skill-Datei

Api Contract Review

API contract review — enforces auth, data scoping, error format, input validation, and API documentation sync. Use when creating or modifying API endpoints.

weardo0 Sterne15.03.2026

Beruf
Kategorien: Smart Contracts

Skill-Inhalt

You are creating or modifying API endpoints. Every endpoint must meet these standards.

Checklist — Verify for EVERY endpoint

Authentication & Authorization

Endpoint has auth middleware (API key, JWT, session, or project-specific auth)
If admin endpoint: requires admin/elevated role
If resource-scoped: extracts and validates scope identifier from context (e.g., tenant ID, org ID, store ID)

Data Scoping (Multi-Tenancy)

ALL database queries filter by the appropriate scope (tenant/org/user)
A user from scope A can NEVER see or modify scope B's data
List endpoints don't leak records from other scopes

Verwandte Skills

Schnellinstallation

Api Contract Review

npx skillvault add weardo/weardo-cptsd-claude-skills-api-contract-review-skill-md

Skill herunterladen Repository öffnen

Autor: weardo
Sterne: 0
Aktualisiert: 15.03.2026
Beruf

Auf dieser Seite

01Checklist — Verify for EVERY endpoint

Error Response Format

400: validation errors (include which fields failed)
401: missing or invalid auth
403: authenticated but not authorized
404: resource not found (don't leak existence info for other scopes)
429: rate limited
500: internal error (don't expose internals)

Input Validation

All inputs validated (use framework validation: struct tags, schema validators, etc.)
Pagination params have sensible defaults and max limits
String inputs have max length constraints
File uploads have size and type limits (if applicable)

API Documentation

Endpoint has API documentation annotations (OpenAPI/Swagger, etc.)
Documentation is regenerated after changes
If public endpoint: public API spec is updated too

BEFORE marking an API endpoint complete:

Run handler/endpoint tests
Verify API documentation is updated
Check that any generated client types are in sync

02

Authentication & Authorization

03Data Scoping (Multi-Tenancy)

04Error Response Format

05Input Validation

06API Documentation

07BEFORE marking an API endpoint complete:

Softwareentwickler

Smart Contracts

Defi Amm Security

Security checklist for Solidity AMM contracts, liquidity pools, and swap flows. Covers reentrancy, CEI ordering, donation or inflation attacks, oracle manipulation, slippage, admin controls, and integer math.

Smart Contracts

Nodejs Keccak256

Prevent Ethereum hashing bugs in JavaScript and TypeScript. Node's sha3-256 is NIST SHA3, not Ethereum Keccak-256, and silently breaks selectors, signatures, storage slots, and address derivation.

Smart Contracts

Syncable Entity Builder And Validation

Create validation logic and migration action builders for syncable entities in Twenty. Use when implementing business rule validation, uniqueness checks, foreign key validation, or building workspace migration actions for syncable entities. Validators never throw and never mutate.

Nft Standards

Implement NFT standards (ERC-721, ERC-1155) with proper metadata handling, minting strategies, and marketplace integration. Use when creating NFT contracts, building NFT marketplaces, or implementing digital asset systems.

Solidity Security

Master smart contract security best practices to prevent common vulnerabilities and implement secure Solidity patterns. Use when writing smart contracts, auditing existing contracts, or implementing security measures for blockchain applications.

Defi Protocol Templates

Implement DeFi protocols with production-ready templates for staking, AMMs, governance, and lending systems. Use when building decentralized finance applications or smart contract protocols.

Softwareentwickler