omk-backend-api-review

Review backend API contracts and implementations for risks across NestJS, Express, or FastAPI services.

130|14|Updated Apr 30, 2026
One-click install
npx skills add https://github.com/dmae97/oh-my-kimi --skill omk-backend-api-review
Or copy as Structured Prompt for Agent
Please help me install this Agent Skill.
Skill: omk-backend-api-review
Source: https://github.com/dmae97/oh-my-kimi/tree/main/templates/skills/agents/omk-backend-api-review
Command: npx skills add https://github.com/dmae97/oh-my-kimi --skill omk-backend-api-review

SYSTEM DOCUMENTATION & REQUIREMENTS

What problem does it solve?

This Skill helps you prevent production issues by systematically reviewing backend API contracts and implementation details that commonly cause security bugs, unstable integrations, and runtime failures.

Core Features & Use Cases

  • API contract review: Checks DTO/schema correctness and backward compatibility to reduce breaking changes.
  • Security and auth coverage: Reviews authentication/authorization design to identify authn/authz weaknesses.
  • Operational and reliability guardrails: Evaluates error response consistency, logging safety (no secrets), and migration safety for safer releases.

Quick Start

Ask an AI agent to run the backend review on your service and produce an API contract summary covering validation, auth risk, database risk, error handling, and test gaps.

Frequently Asked Questions about omk-backend-api-review

High-intent search queries and answers about installing and using this skill.

FAQPage Schema
How do I review backend API contracts for security and reliability risks?

To review backend API contracts, you can validate DTO/schema correctness, verify authn/authz design, and check error handling consistency. This process identifies security bugs and unstable integrations before deployment.

Does this API review work with NestJS, Express, and FastAPI services?

Yes, the API review works with NestJS, Express, and FastAPI services. It evaluates request validation, persistence logic, and database migration safety across these specific frameworks to reduce runtime failures.

What is the best way to check database performance and migration safety in backend APIs?

The best way to check database performance and migration safety is to review persistence logic and verify that migrations remain safe during releases. This prevents runtime failures and data corruption.

How do I ensure error handling consistency and prevent logging secrets in API responses?

To ensure error handling consistency and prevent logging secrets, review your API's error response design and verify that logging mechanisms avoid sensitive data exposure across all service endpoints.

Can I identify test coverage gaps and authentication weaknesses in my API implementation?

Yes, you can identify test coverage gaps and authentication weaknesses by systematically reviewing API implementations. This process produces structured findings covering auth risks, data flow, and missing tests.

What are common limitations when reviewing API contracts for backward compatibility?

When reviewing API contracts for backward compatibility, limitations arise if DTO/schema designs are incomplete or undocumented. Proper request validation and schema correctness checks are required to reduce breaking changes.