api-contract-audit

Detect drift between OpenAPI specs and server implementations via static analysis.

3|Updated Mar 17, 2026
One-click install
npx skills add https://github.com/marcoguillermaz/claude-dev-kit --skill api-contract-audit
Or copy as Structured Prompt for Agent
Please help me install this Agent Skill.
Skill: api-contract-audit
Source: https://github.com/marcoguillermaz/claude-dev-kit/tree/main/packages/cli/templates/tier-m/.claude/skills/api-contract-audit
Command: npx skills add https://github.com/marcoguillermaz/claude-dev-kit --skill api-contract-audit

SYSTEM DOCUMENTATION & REQUIREMENTS

What problem does it solve?

OpenAPI specs often diverge from implemented endpoints, leaving teams with unreliable contracts. This skill performs static analysis to surface drift between OpenAPI documents and code, flagging schema mismatches, status-code discrepancies, and potential breaking changes across frameworks.

Core Features & Use Cases

  • Static analysis only: detects drift, schema drift, status-code mismatches, and versioning inconsistencies.
  • Framework coverage: FastAPI, NestJS, Express+swagger-jsdoc, Next.js route handlers, Django REST.
  • Use cases: ensure contract fidelity between API specs and actual implementations, enable safe refactoring with early drift detection.

Quick Start

Run the api-contract-audit to analyze your OpenAPI spec against your codebase and surface drift, schema mismatches, and versioning issues.

Frequently Asked Questions about api-contract-audit

High-intent search queries and answers about installing and using this skill.

FAQPage Schema
How do I detect drift between my OpenAPI spec and my server implementation?

Static analysis detects OpenAPI drift by parsing specs from disk or framework output and comparing them against server code. It surfaces schema mismatches, status-code discrepancies, and versioning inconsistencies without executing your application.

Can I audit API contracts for a FastAPI or NestJS project?

Yes, API contract audits support FastAPI, NestJS, Express with swagger-jsdoc, Next.js route handlers, and Django REST. The static analysis applies AC1-AC8 checks across these frameworks to validate endpoint and schema alignment.

What is OpenAPI schema drift and how does static analysis find it?

OpenAPI schema drift happens when documentation diverges from implemented endpoints. Static analysis finds it by parsing specifications and server code side-by-side to flag endpoint, schema, status-code, and security alignment inconsistencies.

How do I check for API versioning inconsistencies in my codebase?

To check for API versioning inconsistencies, run a static contract audit that analyzes OpenAPI specs and server implementations together. This process detects versioning drift and potential breaking changes across your framework endpoints.

Does this static analysis execute my code to find API contract issues?

No, this API contract analysis operates strictly as static analysis. It parses OpenAPI specs from disk or framework output and reads server implementations to report endpoint, schema, status-code, and security alignment issues without executing your code.