api-audit

Catalog Fastify API routes, plugins and shared type definitions to detect mismatches and generate a cross-reference report.

Updated Aug 23, 2026
One-click install
npx skills add https://github.com/acedergren/oci-self-service-portal --skill api-audit
Or copy as Structured Prompt for Agent
Please help me install this Agent Skill.
Skill: api-audit
Source: https://github.com/acedergren/oci-self-service-portal/tree/main/.claude/skills/api-audit
Command: npx skills add https://github.com/acedergren/oci-self-service-portal --skill api-audit

SYSTEM DOCUMENTATION & REQUIREMENTS

What problem does it solve?

Catalog API routes, plugins, and shared type definitions to detect mismatches between route schemas and shared types.

Core Features & Use Cases

  • Catalogs API routes, plugins, and shared type definitions to surface missing validations, type drift, and auth gaps.
  • Generates a cross-reference of route schemas against shared schemas to guide remediation.

Quick Start

Run the audit against the codebase to produce a findings report for the API layer.

Frequently Asked Questions about api-audit

High-intent search queries and answers about installing and using this skill.

FAQPage Schema
How do I detect type drift between Fastify route schemas and shared type definitions?

To detect type drift, audit API routes and shared types by cross-referencing Fastify route schemas against shared type definitions. This analysis surfaces missing validations, type mismatches, and auth gaps to guide remediation.

What is static analysis for API route and type mismatches?

Static analysis for API route mismatches catalogs routes, plugins, and shared type definitions to detect inconsistencies. It generates a cross-reference report highlighting missing validations and auth gaps without modifying the source code.

How do I audit API routes for missing validations and auth gaps?

Audit API routes for missing validations by running a static analysis across route files, plugins, and shared schemas. This enforces read-only analysis to surface type drift and authentication gaps, producing a findings report.

Can I cross-reference Fastify plugins against shared schemas without changing source code?

Yes, you can cross-reference Fastify plugins against shared schemas using a read-only audit. The analysis enforces no changes to source code, generating a cross-reference of route schemas against shared definitions to identify mismatches.

Does API route auditing work with shared type definitions in separate packages?

Yes, API route auditing works with shared type definitions in separate packages by cataloging schemas under packages/types/ and cross-referencing them against route files under apps/api/src/routes/ to detect drift and missing validations.

What are the limitations of read-only static analysis for API routes?

The limitation of read-only static analysis for API routes is that it enforces no changes to source code. It only catalogs routes and shared types to surface missing validations, type drift, and auth gaps without applying remediation.