auditing-spec-compliance

Audit OpenAPI specifications against governance rules with severity ratings.

Updated Mar 6, 2026
One-click install
npx skills add https://github.com/musher-dev/bundles --skill auditing-spec-compliance
Or copy as Structured Prompt for Agent
Please help me install this Agent Skill.
Skill: auditing-spec-compliance
Source: https://github.com/musher-dev/bundles/tree/main/openapi-specification-governance/skills/auditing-spec-compliance
Command: npx skills add https://github.com/musher-dev/bundles --skill auditing-spec-compliance

SYSTEM DOCUMENTATION & REQUIREMENTS

💡 This Skill includes scripts (resource) and references (resource) components.

What problem does it solve?

This Skill provides a structured, deterministic framework for auditing OpenAPI specifications, ensuring consistency, identifying technical debt, and enabling automated governance.

Core Features & Use Cases

  • Comprehensive Audit Framework: Utilizes a detailed question bank covering metadata, operation identifiers, tag hierarchy, component reuse, advanced operations, and extension governance.
  • Severity Model & Scorecard: Assigns Pass/Warn/Fail ratings and calculates compliance scores for prioritized issue resolution.
  • CI Tool Integration: Recommends and provides configuration examples for Spectral, Redocly, and Vacuum for automated enforcement.
  • Use Case: When preparing for an API release, use this Skill to conduct a thorough audit of the OpenAPI specification, identify critical compliance issues, and generate a report to guide remediation efforts before deployment.

Quick Start

Use the auditing-spec-compliance skill to audit the OpenAPI specification located at /path/to/your/openapi.yaml.

Frequently Asked Questions about auditing-spec-compliance

High-intent search queries and answers about installing and using this skill.

FAQPage Schema
How do I audit OpenAPI spec compliance against governance rules?

OpenAPI spec compliance auditing uses a structured question bank to evaluate metadata, operations, and component reuse. It assigns Pass/Warn/Fail severity ratings and calculates a compliance score to guide remediation.

What is API governance and how does spec linting enforce it?

Spec linting enforces API governance by checking OpenAPI files against defined rules during development. It ensures specification consistency and identifies technical debt before deployment.

Can I integrate OpenAPI linting with Spectral, Redocly, or Vacuum in CI?

Yes, you can integrate OpenAPI linting with Spectral, Redocly, and Vacuum in CI. The framework provides configuration examples for automated enforcement and continuous compliance checking.

What's the best way to identify technical debt in an OpenAPI specification?

The best way to identify OpenAPI technical debt is auditing component reuse, tag hierarchy, and extension governance. A severity model highlights critical compliance issues for prioritized resolution.

Does OpenAPI compliance auditing work for large specifications with advanced operations?

Yes, OpenAPI compliance auditing covers advanced operations and component reuse for large specifications. It generates detailed reports with prioritized findings to manage complexity and ensure release readiness.