API Design Validator

Validate REST or GraphQL API designs with OWASP Top 10 mappings.

6|Updated Oct 25, 2025
One-click install
npx skills add https://github.com/williamzujkowski/cognitive-toolworks --skill api-design-validator
Or copy as Structured Prompt for Agent
Please help me install this Agent Skill.
Skill: API Design Validator
Source: https://github.com/williamzujkowski/cognitive-toolworks/tree/main/skills/api-design-validator
Command: npx skills add https://github.com/williamzujkowski/cognitive-toolworks --skill api-design-validator

SYSTEM DOCUMENTATION & REQUIREMENTS

What problem does it solve?

REST and GraphQL API design and validation tasks are automated to ensure secure, scalable interfaces and consistent governance across teams.

Core Features & Use Cases

  • OpenAPI/OpenAPI 3.x schema generation and syntax validation for REST APIs.
  • GraphQL SDL design and validation with type-safe schemas and best practices.
  • OWASP API Security Top 10 compliance checks and security recommendations.
  • Versioning strategies, pagination, filtering, and error handling design guidance.
  • Documentation generation and design-pattern templates for rapid onboarding.

Quick Start

Generate a secured schema by specifying REST or GraphQL and running the validator on your API design.

Frequently Asked Questions about API Design Validator

High-intent search queries and answers about installing and using this skill.

FAQPage Schema
How do I validate OpenAPI schema syntax for REST API security?

Load your OpenAPI 3.x specification to apply syntax validation, map findings to the OWASP API Security Top 10, and generate design recommendations for secure REST API interfaces.

Can I check GraphQL SDL against the OWASP API Security Top 10?

Load your GraphQL SDL schema to apply type-safe design validation, map findings to the OWASP API Security Top 10, and generate security recommendations for your GraphQL API.

What is the best way to generate secure API design patterns for pagination and error handling?

Run the API validator on your specification to generate structured design-pattern templates and guidance for versioning, pagination, filtering, and error handling directly within the validation report.

Does the API design validator work without any external dependencies?

Yes, the API design validator operates without external dependencies, allowing you to identify your API type, apply validation rules, and return a structured ValidationReport containing schema findings and security notes.

What security recommendations do I get when validating an API specification?

You receive a structured ValidationReport containing the validated schema, identified findings, security notes mapped to the OWASP API Security Top 10, and recommended design patterns for securing your API interfaces.