api-patterns

Evaluate REST, GraphQL, and tRPC API patterns and validate endpoints.

Updated Jun 4, 2026
One-click install
npx skills add https://github.com/achmf/KostaHub --skill api-patterns-achmf
Or copy as Structured Prompt for Agent
Please help me install this Agent Skill.
Skill: api-patterns
Source: https://github.com/achmf/KostaHub/tree/main/.agent/skills/api-patterns
Command: npx skills add https://github.com/achmf/KostaHub --skill api-patterns-achmf

SYSTEM DOCUMENTATION & REQUIREMENTS

💡 This Skill includes scripts (resource) components.

What problem does it solve?

This Skill resolves the ambiguity in choosing the right API architecture and ensures that your implementation follows industry-standard best practices for performance, security, and maintainability.

Core Features & Use Cases

  • Architectural Decision Support: Navigate the trade-offs between REST, GraphQL, and tRPC to choose the best fit for your specific project requirements.
  • Standardized Design: Implement consistent resource naming, response formats, and versioning strategies to improve developer experience.
  • Security & Reliability: Apply robust patterns for authentication, rate limiting, and security testing to protect your endpoints from common vulnerabilities like BOLA and injection attacks.

Quick Start

Use the api-patterns skill to validate the API endpoints in the current project directory using the built-in validator script.

Frequently Asked Questions about api-patterns

High-intent search queries and answers about installing and using this skill.

FAQPage Schema
How do I choose between REST, GraphQL, and tRPC for my application architecture?

Choosing between REST, GraphQL, and tRPC requires evaluating architectural trade-offs based on your specific project requirements. This Skill provides decision support to navigate performance, maintainability, and client needs to select the optimal API pattern.

What are the best practices for API design and resource naming?

API design best practices involve standardizing resource naming, response formats, and versioning strategies. Following these principles ensures consistent implementation and significantly improves the developer experience for consumers of your endpoints.

How can I protect my API endpoints from BOLA and injection attacks?

Protecting API endpoints from BOLA and injection attacks requires applying robust security patterns for authentication and rate limiting. This Skill enables automated validation of security configurations to harden your API against common vulnerabilities.

Can I automatically validate API endpoints and security configurations in my project?

Yes, you can validate API endpoints and security configurations in your project directory using integrated diagnostic scripts. This automated validation checks your implementation against industry-standard API patterns and security hardening rules.

When should I not use GraphQL over REST for my API?

You should reconsider GraphQL over REST when evaluating architectural trade-offs reveals that your application requirements favor simpler standardized resource caching. This Skill helps identify these constraints by evaluating REST, GraphQL, and tRPC patterns for diverse needs.