Analyzes HTTP API surface areas in code diffs for REST compliance and security.
npx skills add https://github.com/pekral/phpstan-rules --skill api-review-pekral
Please help me install this Agent Skill. Skill: api-review Source: https://github.com/pekral/phpstan-rules/tree/main/.claude/skills/api-review Command: npx skills add https://github.com/pekral/phpstan-rules --skill api-review-pekral
This Skill addresses the risk of shipping inconsistent, insecure, or non-idempotent API contracts by providing a structured, automated review lens for HTTP endpoints and route definitions.
Invoke the api-review skill on the current diff to audit all modified routes and controller logic for REST compliance.
High-intent search queries and answers about installing and using this skill.
HTTP API design review detects improper HTTP method usage, non-idempotent state mutations, and incorrect status codes in route definitions and controller handlers. It validates REST semantics to ensure consistent, consumer-ready API contracts across modified endpoints.
Enforce idempotency and correct status codes by auditing HTTP endpoints in code diffs against RESTful design principles. This validates that state mutations use proper idempotency keys and return specific 201/202 responses instead of generic errors.
Yes, API contract validation detects leaks of internal database structures by analyzing DTOs and route definitions. It ensures consistent field naming and standardized error envelopes to prevent exposing internal data structures through the API surface.
Yes, you can review controller handlers for trust-boundary bypasses by analyzing HTTP API surface areas in code diffs. This validates API designs against established security best practices and architectural standards for secure error handling.
Automated REST compliance checking operates strictly on route definitions, controller handlers, and DTOs found in code diffs. It cannot detect runtime security vulnerabilities or business logic flaws outside the analyzed API surface area and architectural standards.
ArtisanCloudStandardize CRUD DTO definitions and validation for PowerX HTTP transport handlers.
DaviRain-SuReview pre-landing pull requests for SQL safety and trust boundary issues.
pratikpakhaleImplement Convex.js queries, mutations, actions, and HTTP actions with validation.
bagechashuDesign, manage, and document RESTful APIs with standardized endpoints and security.
