laraveldaily-api-audit

Audit Laravel API codebases for response, validation, auth, and performance issues.

132|33|Updated Mar 10, 2026
One-click install
npx skills add https://github.com/LaravelDaily/AI-Workflows-For-Laravel --skill laraveldaily-api-audit
Or copy as Structured Prompt for Agent
Please help me install this Agent Skill.
Skill: laraveldaily-api-audit
Source: https://github.com/LaravelDaily/AI-Workflows-For-Laravel/tree/main/skills/laraveldaily-api-audit
Command: npx skills add https://github.com/LaravelDaily/AI-Workflows-For-Laravel --skill laraveldaily-api-audit

SYSTEM DOCUMENTATION & REQUIREMENTS

What problem does it solve?

This Skill helps teams and maintainers find high-impact API design and implementation issues in Laravel projects so they can stabilize contracts, fix performance regressions, and reduce accidental data exposure.

Core Features & Use Cases

  • API contract checks: Detect raw model returns, inconsistent JSON shapes, and missing or inconsistent status codes.
  • Behavioral and performance checks: Identify N+1 queries, missing eager loading, unbounded collections, and rate-limiting gaps.
  • Security and correctness guidance: Highlight missing validation, unsafe query parameter handling, transactional gaps, and auth/guard misconfigurations.
  • Use Case: Run an audit before a public API release or during a refactor to get a prioritized, file-linked report with concrete remediation steps.

Quick Start

Audit this repository's Laravel API and produce a structured prioritized report of response shapes, validation, auth, performance, and route-design issues with file-level examples and remediation suggestions.

Frequently Asked Questions about laraveldaily-api-audit

High-intent search queries and answers about installing and using this skill.

FAQPage Schema
How do I audit a Laravel API for missing validation and N+1 queries?

You can audit a Laravel API by scanning controllers, resources, routes, and middleware to identify missing validation, N+1 queries, and eager loading gaps. This produces a prioritized, file-linked report with severity levels and remediation suggestions.

What is an API audit for Laravel response shapes and status codes?

An API audit for Laravel response shapes detects raw model returns, inconsistent JSON structures, and missing status codes. It scans controllers and resources to stabilize API contracts and prevent accidental data exposure before public release.

How do I check Laravel API routes for authentication flaws and guard misconfigurations?

You check Laravel API authentication by scanning route definitions and middleware to identify auth guard misconfigurations and security flaws. The audit generates per-file findings with severity levels and actionable remediation steps.

Can I run a code review on a Laravel API project before a public release?

Yes, you can run an API code review on Laravel projects before public release or during a refactor. It scans exception handling and tests to detect transactional gaps, unbounded collections, and rate-limiting issues, returning a structured prioritized report.

Does the Laravel API audit provide version-specific remediation suggestions?

Yes, the audit tailors remediation suggestions to the detected Laravel version and auth approach. It produces line hints where possible and concrete steps for fixing incorrect response shapes and unsafe query parameter handling.

What are common Laravel API performance issues when returning unbounded collections?

Common Laravel API performance issues include unbounded collections, missing eager loading, and N+1 queries. The audit scans controllers and tests to identify these behavioral issues and provides prioritized, file-linked remediation guidance.