spine-review

Audit REST API endpoints and backend code for HTTP methods, status codes, and response formats.

69|8|Updated Mar 16, 2026
One-click install
npx skills add https://github.com/tonone-ai/tonone --skill spine-review
Or copy as Structured Prompt for Agent
Please help me install this Agent Skill.
Skill: spine-review
Source: https://github.com/tonone-ai/tonone/tree/main/team/spine/skills/spine-review
Command: npx skills add https://github.com/tonone-ai/tonone --skill spine-review

SYSTEM DOCUMENTATION & REQUIREMENTS

What problem does it solve?

This skill provides a rigorous, repeatable API and backend review process to ensure REST conventions, proper authentication, input validation, consistent error handling, pagination, rate limiting, and test coverage across a codebase.

Core Features & Use Cases

  • REST & HTTP hygiene: verify correct methods, status codes, resource naming, and consistent response envelopes.
  • Security & validation: ensure auth middleware usage, proper authorization checks, and validated inputs across routes.
  • Quality gates: check pagination, rate limiting, error handling, and test coverage with clear remediation guidance.

Quick Start

Run a spine-review on the current repository to generate a structured backend code review focusing on REST conventions, auth, validation, error handling, pagination, and test coverage.

Frequently Asked Questions about spine-review

High-intent search queries and answers about installing and using this skill.

FAQPage Schema
How do I review REST API endpoints for correct HTTP methods and status codes?

Reviewing REST API endpoints for correct HTTP methods and status codes involves auditing the route stack and backend code to verify resource naming, response formats, and error handling. A structured review provides concrete file references and actionable fixes to ensure consistency.

What should a backend code review cover for authentication and input validation?

A backend code review for authentication and input validation should assess auth middleware usage, authorization checks, and validated inputs across routes. The review examines middleware and models to ensure proper security practices and generates remediation guidance for any gaps.

How do I check pagination, rate limiting, and error handling consistency in an API?

Checking pagination, rate limiting, and error handling consistency in an API requires auditing the middleware and route stack to verify uniform response envelopes. The process produces a structured review with actionable fixes and coverage notes aligned to testing practices.

Does an API review include test coverage checks for the route stack?

Yes, an API review includes test coverage checks for the route stack to ensure quality gates are met. The review assesses tests alongside models and middleware, producing coverage notes and concrete remediation guidance aligned with the project's CI practices.

What is the best way to audit backend code for REST conventions and security?

The best way to audit backend code for REST conventions and security is a structured review that examines HTTP methods, auth middleware, and input validation. This approach yields concrete file references and actionable fixes for consistent response formats.